The winrm listener just needs the fingerprint. It does not need the path of the certificate on the machine, nor do we need to point to a certificate in the Windows cert store.
We should update the RFC-doc to remove this option. Instead, we need the certificate thumbprint as the option.