Exchange 2007 SSL Cert

Exchange 2007 Certificates
Exchange 2007 uses certificates for all sorts of things; with Exchange 2003 we were only concerned with Outlook Web Access, Outlook Mobile access and direct push email. Now the certificate does all manner of things internally. So if you change the certificate so that it has an "Issued To" name that resolved on the internet like webmail.yourdomain.com for example and you internally the server is called exchange.yourdomain.local things will break.
So you need to server to be able to respond to multiple names, which it cant do ordinarily. So to get round this problem you need to do the following.
As before
The Issued to part of the certificate still needs to resolve to your public address webmail.yourdomain.com for example,
Your clients still need to trust the Authority that issued the certificate.
But now
You can enter multiple names for your INTERTNAL addresses i.e. Exchange1 and exchange1.yourdomain.local etc these are added as "Subject Alternative Names"

To view them on your existing Exchange server go to Outlook Web access View the certificate details > Scroll down > Subject Alternative names are near the bottom.
To see what you have allready
Start > All Programs > Microsoft Exchang eServer 2007 > Exchange Management console > get-exchangecertificate {Enter}
To Generate a request for a new one....
This site will generate the code for you https://www.digicert.com/easy-csr/exchange2007.htm
New-ExchangeCertificate -GenerateRequest -Path c:\petenetlivecert.csr -KeySize 1024 -SubjectName "c=GB, s=Tesside, l=Middlesbrough, o=PeteNetLive, ou=Petes Server, cn=https://mail.petenetlive.com" -DomainName autodiscover.petenetlive.com, dc200801.petenetlive.com, dc200801 -PrivateKeyExportable $True

Open c:\petenetlivecert.csr in notepad and copy the contents to the clipboard.
Open a web page and go to https://ip of your ca/certserv
Request a certificate > advanced Certificate Request
Submit a certificate request by using a base 64.....
Paste in the text from c:\mail_petenetlive_com.csr se the Certificate Template to Web Server > Submit
Download certificate  > Save > Name it something simple like petenetlive.cer > Save it to the root of the C drive.
Import the certificate
Import-ExchangeCertificate -Path c:\petenetlive.cer
Note: At this point Copy the thumbprint number to the clipboard (i.e. 9292D650DFFD7E055145E5CA5A29E08DFC07C53C)
Enable the Certificate

Enable-ExchangeCertificate -Services "SMTP,POP,IMAP,IIS"
Enter the Thumbprint of your certificate (i.e. 9292D650DFFD7E055145E5CA5A29E08DFC07C53C)
Select Yes To Overwrite

---------------------------------------------------
 

To Delete a Certificate
Remove-ExchangeCertificate -Thumbprint 3734324882C41CFE6EBF96F5D40FEF3CCFA82AEC
Then Yes to Confirm