I have a "Standard UCC SSL Certificate" from GoDaddy. I needed to add another SAN to it. They were able to reissue without having to create and submit a new CSR. However, I am now having trouble getting Exchange to recognize it. I went through the wizard for "Import Exchange Certificate" in the Server Configuration, and it said it was successful, but the new cert does not show up in the list. I tried doing it again, and was told that a certificate with that thumbprint already exists. So it's apparently there, but I seem to be missing a step before it will let me use it. I've searched for help, but everything I've found is about renewing the certificate or installing the initial one.

  • The way windows bind public/private key pairs it would be easier for you to re-key the certificate with the new SANs. Very easy to do with Godady and well documented for exchange. Jun 28, 2017 at 17:44
  • Would it be best to treat this as a renewal on the Exchange side, or create a new one?
    – atariguy
    Jun 28, 2017 at 21:41
  • never renew, always make new keypairs. Jun 28, 2017 at 21:45


Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Browse other questions tagged or ask your own question.