Link to home
Start Free TrialLog in
Avatar of teomcam
teomcam

asked on

Bad Exchnage 2010 certificate renewal request

My exchange 2010's certificate about to expire and to renew it I did a request but looks weird as you can see below. I tryed a couple of times but everytime its creating the request as below. How can I fix that?

      
0‚“0‚{ 0í1)0'U a2BcBQ5s8xWnXm088jjIVKz0Vpg-lb3q10	UAU10U
mail.ict.qld.au10U
GT97245988110/U(See www.rapidssl.com/resources/cps (c)101/0-U&Domain Control Validated - 

RapidSSL(R)10Umail.ict.qld.au0‚"0
	*†H†÷
 ‚ 0‚
‚ ÌwÏ‹•uûUpû©„|´¿Œ
µ¿%‘!£¤¼ù]4Î!R

+G“7_ c*k*Žqq8[æ4¨cì951Žv´®9H³þob4jµV‹p9]a–›#¬L ¾zdÄ!&·Ù÷*á¡Ó{X 뷁µ+Ó¨,ª°#$EÎÒe¯Dçë %È

¤ó¶Ðo@`*ÓoËï´”Ý;²µÖân†ë{G®ø8›±@d)å%‚è Û*¤,ZžLÚ֐Ž’©zîQƒÉÒàAFZ;ƒ3npknü

€ÑÇÏ»_Qß«OÆA-!.æOêHû îƒålp<)Îhõ> YM  ‚^0
+‚7
1
6.1.7601.20^	+‚71Q0O

ICTES2010.ict.localICTNET\ICTES2010$"Microsoft.Exchange.ServiceHost.exe0l	*†H†÷
	1_0]

0Uÿ 0U0‚mail.ict.qld.au0Uÿ0 0UUî·N6oCÙ&‡ùîB]‘„~¯0r
+‚7
1d0bZ M i c r 

o s o f t   R S A   S C h a n n e l   C r y p t o g r a p h i c   P r o v i d e r 0
	*†H†÷
 

‚ #ûÆÎ̪ÔÌÍn4'³…àÀ²¦7Ñ1ÇY›Ú¸ÿb.[©Ü!(?3Óöµ[ÝAyO’fÖö%^M§!åØŽ“d1*£ë
"…xýÀi@¯T¸¡ÛPûœ
M
tô8ÐÐ9Kjù#oÚ
¨
vú&+ž&„Œ B@¿DÚæOæ]|g}äe×6&«3KðJs.î1¾ó¢Óß´ô—cGéDs¹áõbaq]±9œxú5§ {[YPÚ‘¡E*¶â’Åh÷

(õ×ìô‰´”„o …7ëf/ÆÆïAFÂ/„áöŒ	Ê ‡;aÀ±,÷Þ Þ ¯RÅžös(³²žÉRK­ñüD

Open in new window

Avatar of Rajith Enchiparambil
Rajith Enchiparambil
Flag of United Kingdom of Great Britain and Northern Ireland image
What if you get the powershell command by using Digicert CSR and then run it locally on the server?

https://www.digicert.com/easy-csr/exchange2010.htm

http://www.digicert.com/csr-creation-microsoft-exchange-2010.htm
Avatar of teomcam
teomcam

ASKER

Hi,

Below you can see the certificate about to expire (icb v3). I do not know why but there is another certificate which called (icb) and have no idea why they did like that. I think these 2 certificates together or something. Thats why I wanna renew this certificate instead of creating new one. Could you explain to me please whats them for? According to that we can create new one or persist on renewal.
Regards

 Capture2.JPG
SOLUTION
Avatar of suriyaehnop
suriyaehnop
Flag of Malaysia image
Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
ASKER CERTIFIED SOLUTION
Avatar of praveenkumare_sp
praveenkumare_sp
Flag of India image
Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
Avatar of praveenkumare_sp
praveenkumare_sp
Flag of India image
if you want to create a request of your own double click on the certificate > go to details tab > and see the value for attribute "Subject Alternative Names" , give all the entries you see there and i would give you a command for creating a new certificate


Go to Exchange management shell and run the below command

New-ExchangeCertificate -generateRequest -SubjectName "c=US, o=Woodgrove Bank, cn=mail1.woodgrovebank.com" -DomainName mail1.woodgrovebank.com, woodgrovebank.com, example.com, autodiscover.domain.com -PrivateKeyExportable $true > c:/cert.txt

<change the above command and put the urls used by ur users , if ur not sure give me the OWA url, internal domain name, external domain name and i would give u the exact command>


after u do this run  give the contents of cert.txt download and import the certificate and after that enable the certificate using
Enable-exchangecertificate -services "iis,smtp.pop.imap" -thumbprint <put the thunbprint u get from the previous command>
Avatar of teomcam
teomcam

ASKER

Could not find the answer for my question and created new certificate request. Thanks to all helpers. Regards