asked on

SSL Certificate on SBS2011 Expiring , where to find it

Hi all,

I've recently taken over a server, SBS2011 with Exchange 2010, also running IIS. I received a notice from godaddy that an SSL certificate for the domain is expiring. This domain is externally accessible as well.

I've looked in MMC, Certificates, Local Computer, while I see other certificates that match certificates expiring at different times, I cannot seem to find this one in particular .

I'm beginning to think it is perhaps an unused certificate that is expiring, however I am hoping for some assistance on where else to check on my server to see if there is a cert matching it. (trying to prevent any kind of outage if it does expire and is needed!)

Is there any other places on the server I should check, or any suggestions on how to tell where the certificate in question is being used?

Thanks in advance

ASKER CERTIFIED SOLUTION

becraig

membership

This solution is only available to members.

To access this solution, you must be a member of Experts Exchange.

Start Free Trial

SOLUTION

Mohammed Tahir

membership

This solution is only available to members.

To access this solution, you must be a member of Experts Exchange.

Start Free Trial

ChiIT

ASKER

thank you both...

gci cert:\LocalMachine\My | ft notafter, Subject returned 5 certificates, none matched the expiration date that is the one in question.

Exchange 2010 is running on the same server, do I need to run a different powershell for that command or is it the same as the server? I ran in the server powershell and received an error saying it couldn't find that command.

becraig

If the command returned no certs showing up as expiring on that date then it seems your assumption is correct.

Any certificate for use by Exchange would be in the local store, the absence of an expiring cert indicate this is not a cert expiring locally.

ChiIT

ASKER

ok I answered my own question. Ran the exchange powershell and there is also no certificate there that matches the expiration date of the godaddy one in question...

ChiIT

ASKER

thanks becraig, just so I understand, that command will list all certs, right? So for IIS, exchange, etc?

SOLUTION

becraig

membership

This solution is only available to members.

To access this solution, you must be a member of Experts Exchange.

Start Free Trial

ChiIT

ASKER

thanks guys! appreciate the quick response and help!