• Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 1123
  • Last Modified:

Bad Exchnage 2010 certificate renewal request

My exchange 2010's certificate about to expire and to renew it I did a request but looks weird as you can see below. I tryed a couple of times but everytime its creating the request as below. How can I fix that?

     
0‚“0‚{ 0í1)0'U a2BcBQ5s8xWnXm088jjIVKz0Vpg-lb3q10	UAU10U
mail.ict.qld.au10U
GT97245988110/U(See www.rapidssl.com/resources/cps (c)101/0-U&Domain Control Validated - 

RapidSSL(R)10Umail.ict.qld.au0‚"0
	*†H†÷
 ‚ 0‚
‚ ÌwÏ‹•uûUpû©„|´¿Œ
µ¿%‘!£¤¼ù]4Î!R

+G“7_ c*k*Žqq8[æ4¨cì951Žv´®9H³þob4jµV‹p9]a–›#¬L ¾zdÄ!&·Ù÷*á¡Ó{X 뷁µ+Ó¨,ª°#$EÎÒe¯Dçë %È

¤ó¶Ðo@`*ÓoËï´”Ý;²µÖân†ë{G®ø8›±@d)å%‚è Û*¤,ZžLÚ֐Ž’©zîQƒÉÒàAFZ;ƒ3npknü

€ÑÇÏ»_Qß«OÆA-!.æOêHû îƒålp<)Îhõ> YM  ‚^0
+‚7
1
6.1.7601.20^	+‚71Q0O

ICTES2010.ict.localICTNET\ICTES2010$"Microsoft.Exchange.ServiceHost.exe0l	*†H†÷
	1_0]

0Uÿ 0U0‚mail.ict.qld.au0Uÿ0 0UUî·N6oCÙ&‡ùîB]‘„~¯0r
+‚7
1d0bZ M i c r 

o s o f t   R S A   S C h a n n e l   C r y p t o g r a p h i c   P r o v i d e r 0
	*†H†÷
 

‚ #ûÆÎ̪ÔÌÍn4'³…àÀ²¦7Ñ1ÇY›Ú¸ÿb.[©Ü!(?3Óöµ[ÝAyO’fÖö%^M§!åØŽ“d1*£ë
"…xýÀi@¯T¸¡ÛPûœ
M
tô8ÐÐ9Kjù#oÚ
¨
vú&+ž&„Œ B@¿DÚæOæ]|g}äe×6&«3KðJs.î1¾ó¢Óß´ô—cGéDs¹áõbaq]±9œxú5§ {[YPÚ‘¡E*¶â’Åh÷

(õ×ìô‰´”„o …7ëf/ÆÆïAFÂ/„áöŒ	Ê ‡;aÀ±,÷Þ Þ ¯RÅžös(³²žÉRK­ñüD

Open in new window

0
teomcam
Asked:
teomcam
2 Solutions
 
Rajith EnchiparambilOffice 365 & Exchange ArchitectCommented:
What if you get the powershell command by using Digicert CSR and then run it locally on the server?

https://www.digicert.com/easy-csr/exchange2010.htm

http://www.digicert.com/csr-creation-microsoft-exchange-2010.htm
0
 
teomcamAuthor Commented:
Hi,

Below you can see the certificate about to expire (icb v3). I do not know why but there is another certificate which called (icb) and have no idea why they did like that. I think these 2 certificates together or something. Thats why I wanna renew this certificate instead of creating new one. Could you explain to me please whats them for? According to that we can create new one or persist on renewal.
Regards

 Capture2.JPG
0
 
suriyaehnopCommented:
I think the certificate with named icb is a internal certificate.You can check with public certificate provider if they have option to renew the certificate like Digicert has option to renew the certificate.

Like Rajith said, go to http://www.digicert.com/csr-creation-microsoft-exchange-2010.htm. Put the information and then copy the cmdlt shell and run on your Exchange server. Try to open the output file using notepad.
0
A Cyber Security RX to Protect Your Organization

Join us on December 13th for a webinar to learn how medical providers can defend against malware with a cyber security "Rx" that supports a healthy technology adoption plan for every healthcare organization.

 
praveenkumare_spCommented:
if you want to create a request of your own double click on the certificate > go to details tab > and see the value for attribute "Subject Alternative Names" , give all the entries you see there and i would give you a command for creating a new certificate


Go to Exchange management shell and run the below command

New-ExchangeCertificate -generateRequest -SubjectName "c=US, o=Woodgrove Bank, cn=mail1.woodgrovebank.com" -DomainName mail1.woodgrovebank.com, woodgrovebank.com, example.com, autodiscover.domain.com -PrivateKeyExportable $true > c:/cert.txt

<change the above command and put the urls used by ur users , if ur not sure give me the OWA url, internal domain name, external domain name and i would give u the exact command>

after u do this run
Enable-exchangecertificate -services "iis,smtp.pop.imap" -thumbprint <put the thunbprint u get from the previous command>
0
 
praveenkumare_spCommented:
if you want to create a request of your own double click on the certificate > go to details tab > and see the value for attribute "Subject Alternative Names" , give all the entries you see there and i would give you a command for creating a new certificate


Go to Exchange management shell and run the below command

New-ExchangeCertificate -generateRequest -SubjectName "c=US, o=Woodgrove Bank, cn=mail1.woodgrovebank.com" -DomainName mail1.woodgrovebank.com, woodgrovebank.com, example.com, autodiscover.domain.com -PrivateKeyExportable $true > c:/cert.txt

<change the above command and put the urls used by ur users , if ur not sure give me the OWA url, internal domain name, external domain name and i would give u the exact command>


after u do this run  give the contents of cert.txt download and import the certificate and after that enable the certificate using
Enable-exchangecertificate -services "iis,smtp.pop.imap" -thumbprint <put the thunbprint u get from the previous command>
0
 
teomcamAuthor Commented:
Could not find the answer for my question and created new certificate request. Thanks to all helpers. Regards
0

Featured Post

Industry Leaders: We Want Your Opinion!

We value your feedback.

Take our survey and automatically be enter to win anyone of the following:
Yeti Cooler, Amazon eGift Card, and Movie eGift Card!

Tackle projects and never again get stuck behind a technical roadblock.
Join Now