CSR Generation for Exchange 2010

Author:Lars Nyström
Updated:Aug 11, 2025

To generate a Certificate Signing Request (CSR) for Exchange 2010, follow these steps:

  1. Open the Exchange Management Shell: Start by going to Start > Programs > Microsoft Exchange 2010 > Exchange Management Shell.

  2. Run the CSR Command:

    New-ExchangeCertificate -GenerateRequest -KeySize 2048 -SubjectName "c=US, s=California, o=Company Inc., cn=FirstDomain.com" -DomainName SecondDomain.com, ThirdDomain.com* -PrivateKeyExportable:$true
    
    • Replace XX with your locality (e.g., US).
    • Replace YY with your state or province (e.g., California).
    • Use your primary domain (FirstDomain.com) and additional domains (SecondDomain.com, ThirdDomain.com).
  3. Copy the CSR: After running the command, right-click on the output to mark it, then copy and paste it into your certificate activation form.

  4. Save the CSR Locally (optional):

    Set-Content -path "C:\CSR_Name.csr" -Value $Data
    

    Replace CSR_Name with your desired filename.

  5. Activate the Certificate: Use the generated CSR during the SSL activation process on Esadax or your provider's platform.