Want to protect your cyber security and still get fast solutions? Ask a secure question today.Go Premium

  • Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 922
  • Last Modified:

Generating SSL CSR for Wild Card GoDaddy Cert Exchange 2007


Anyone have any experience generating CSR on Exchange 2007 for Wild Card cert for GoDaddy I keep getting CN is wrong.

Any help would be appreciated.
1 Solution
You're supposed to generate CSR on Exchange 2007 and get the .csr sent to GoDaddy for them to provide you the cert.



Confirm if you are getting CN is wrong error for intranet/internal domain names.
If that is the case then go through below link

OZSGAuthor Commented:
Thanks guys will check and let you know tomorrow
Free Backup Tool for VMware and Hyper-V

Restore full virtual machine or individual guest files from 19 common file systems directly from the backup file. Schedule VM backups with PowerShell scripts. Set desired time, lean back and let the script to notify you via email upon completion.  

Simon Butler (Sembee)ConsultantCommented:
If you are doing a wildcard certificate, then do the request through IIS manager, entering *.example.com as the common name. Then complete the request through IIS and just enable it in Exchange 2007.

However it should be pointed out that a wildcard is NOT the same as a UC certificate that Exchange prefers and can actually cause problems for some remote access clients.

OZSGAuthor Commented:
Hi guys, sorry for the late response, my dad just passed away and I have been busy with settling his affairs. THanks for the tip Simon but when I went to IIS Manager I get this message. Refer to attached doc. Valid-Certs.docx

Looks like I have some other certs in there that are still valid. Do I do a renew, replace or remove? If I select remove it shows me the valid certs. I dont think I want to renw so I guess remove would be the way?
Simon Butler (Sembee)ConsultantCommented:
If you are going to use IIS manager which already has an SSL certificate in place, then the quickest option is to just create a dummy site to do the certificate request and install, then switch them over.
Otherwise you have to remove the certificate then do a new request. While you wait for the new certificate anything using SSL (like Outlook) will be unable to connect.


Featured Post

Problems using Powershell and Active Directory?

Managing Active Directory does not always have to be complicated.  If you are spending more time trying instead of doing, then it's time to look at something else. For nearly 20 years, AD admins around the world have used one tool for day-to-day AD management: Hyena. Discover why

Tackle projects and never again get stuck behind a technical roadblock.
Join Now