Exchange 2013 and higher - Generate CSR

A Certificate Signing Request (CSR) is required when applying for an SSL certificate. This CSR (and private key) can be generated on your webserver. To request a wildcard certificate, fill in an * (asterisk) for the subdomain, for example *.sslcertificaten.nl (instead of www.sslcertificates.nl).

This manual is for Exchange 2013 and higher. It describes This manual describes how to create a CSR using the Exchange Certificate Wizard.

  1. To access the Exchange Admin Center, please open a web browser and type: https://localhost/ecp in the address bar.
  2. Login with Domain\user name and enter your password. 

    Exchange 2013 Aanmaken CSR

  3. Click on the Servers link in the column to the left, then click on Certificates in the upper right corner and finally on the + symbol

    Exchange 2013 Aanmaken CSR

  4. The new exchange certificate wizard will now appear in a pop-up window.
    Select Create a request for a certificate from a certification authority and click on Next

    Exchange 2013 Aanmaken CSR

  5. In the friendly name field, enter a name that is easy to remember. Click on Next.
    Note: This name is not part of the certificate request (CSR). 

    Exchange 2013 Aanmaken CSR

  6. If you would like to request a wild-card certificate, then check the box and enter the primary domain, for example: sslcertificaten.nl. If you do not want to request a wild-card certificate, click on Next.

     Exchange 2013 Aanmaken CSR

  7. Click on Browse and select the location where you wish to save the CSR. Click on Next.

     Exchange 2013 Aanmaken CSR

  8. If you are requesting a wild-card certificate, the next step will be skipped. If this is not the case, please select the services you wish to protect. Click on Next

    Exchange 2013 Aanmaken CSR

  9. In the following screen, you will see a list of domain names which Exchange 2013 proposes to include in the certificate. Click on Next.
    Note: Check the list of names and, if necessary, add names using the + button

    Exchange 2013 Aanmaken CSR

  10. The organization name has to be identical to the company name registered in the Chamber of Commerce. In the Department name field for example, you could fill in: ICT department or System Administration (overview CSR fields). Note: There is a bug in Exchange 2013 which causes the fields O=(Organization) and OU=(Department) to be switched during the creation of CSR. To correct this, please enter the department name in the O field, and the organization name in the OU field. Click on Next

    Exchange 2013 Aanmaken CSR

  11. Enter a shared network path to save the CSR on your computer as a .req file. Then click on Finish

    Exchange 2013 Aanmaken CSR

To order a certificate, copy the entire contents of the generated CSR, including the first and last line and all dashes.

Order certficate

SSLCheck

Our SSLCheck will examine your website's root and intermediate certificates for correctness and report any potential issues

point up