Server Fault is a question and answer site for system and network administrators. It's 100% free, no registration required.

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

my certificate was expired thus I bought a new one. But when configure the panel of ssl provider it give me the following error (I mean, when I put the csr in the form):

Common name is already present in a current certificate.

I think because the old certificate is still installed. Maybe to solve the problem I have to renew the old one, but how ? If I type something like:

Get-ExchangeCertificate -thumbprint xxxxxx | New-ExchangeCertificate

is that correct ? but it ask me if it can overwrite the old certificate ?!?!? And also my certificate expires in 3 years... but with the procedure to renew it expires only in 1 year.. help me!!

share|improve this question
"I think because the old certificate is still installed" <-- No, it means exactly what it says. You've entered a CN that is already present in a certificate that is not expired or about to expire (typically 14-30 days before expiration). "but with the procedure to renew it expires only in 1 year." <-- The wat are you talking about??? – Chris S Feb 26 '14 at 15:15
Sorry, my english is terrible. Well, the installed certificate was expired yesterday. Today I bought a new one. I am in the control panel of the ssl provider and I have to put the csr (this is a NEW csr) in the form. When I click the next button it gives me the error. In the csr I inserted che and in the san With the "but with the procedure to renew it expires only in 1 year" I am talking about the procedure to renew csr by get-exchangecertificate | new-exchangecertificate – Luigi Feb 26 '14 at 16:04

If you've already bought a new one, import it and then unbind the Exchange services (SMTP, etc.) bound to the old one and then bind them to the new one.

It's pretty straightforward, really no different than when you setup the original cert, but you can follow the Technet articles below:

share|improve this answer
I have payed a new one, but I have not still created, because the ssl provider don't accept my csr. – Luigi Feb 26 '14 at 16:07

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.