The server account needs full control.

If you remove your path and do the backup, you should find the cert in your SQL Server's \data folder. However the cert (and private key files) should be ACL'd to the service account and you need administrative permissions to copy these anywhere.

You can set specific permissions for the service account to a particular folder, but c:\temp is not likely a good location.