Ask a Question

Advanced Search

Solution ID : SO22071

Last Modified : 05/31/2019

Managed PKI for SSL - Certificate Signing Request (CSR) Generation Instructions for Microsoft Exchange 2007



If you are unable to use these instructions for your server, DigiCert recommends that you contact Microsoft


  2. The CSR needs to contain the following attributes:
  • Organization: The full legal name of your company.

    Here is an example of the proper command syntax:

New-ExchangeCertificate -GenerateRequest -SubjectName "C=US, S=California, L=Mountain View, O=Some Organization, OU=IT," -privatekeyexportable:$true -keysize 2048 -Path c:\certificate_request.txt

NOTE: For all certificates the key bit length must be 2048 (-keysize 2048) For further reference please check the
Microsoft Knowledge Base here.

Requirements for Subject Alternative Name certificates:

  1. Verify your CSR
  2. Proceed with Enrollment where you will be requested to paste in the CSR text.
