Exchange 2007 CSR Creation Instructions

How to generate a CSR for Microsoft Exchange 2007

Recommended: Save yourself a lot of time—and typing—by using our new Easy CSR Command Generator for Exchange 2007. Just fill in the details, click Generate, and paste your customized New-ExchangeCertificate into the Exchange Management Shell.

Of course if you prefer to roll your own shell commands—and there's nothing wrong with that—just follow the instructions below:

1) From the Exchange Management Shell command line, type the following:

New-ExchangeCertificate -GenerateRequest -Path c:\DigiCertCSR.txt -SubjectName "c=US, l=YourLocalityOrCity, s=YourStateOrProvince, o=YourCompanyInc, cn=YourFirstDomain.com" -DomainName YourSecondDomain.com, YourThirdDomain.com -PrivateKeyExportable:$true

Although this command is too long to fit on one line here in your browser, you need to enter it into the management shell as one line. Of course, you need to replace the details listed in this sample command with the details of your own organization including your two-letter country code (c=), your city or locality (l=), your state or province (s=), and your organization legal name (o=).

Notice that the first domain name is listed inside the "-SubjectName" after "cn=" and additional domain names are later added after the -DomainName parameter with commas between the additional domain names. You can add as many additional domain names as necessary.

2) You will now find your new CSR file named DigiCertCSR.txt in the root of your C: drive. Open this file with a text editor such as Notepad and paste the entire contents of the file, including the BEGIN and END tags to the DigiCert UC Certificate order form.