To install an SSL certificate in Exchange 2013 Shell, follow these steps:

1. Open Exchange Management Shell: Start by launching the Exchange Management Shell on your server.

2. Create a Certificate Request (CSR): Use the New-ExchangeCertificate cmdlet to generate a CSR with required parameters:

   New-ExchangeCertificate -Subject "CN=YourDomainName" -PrivateKeyLength 2048
   

   Replace YourDomainName with your domain name.

3. Activate the CSR: Log in to your certificate provider's website, upload the CSR, and download the certificate files (.crt and .p7b).

4. Import Certificates:

   • Decode the .crt file by copying its content into a text editor and locating the SHA1 Fingerprint.
   • Use the thumbprint (removing colons) in the Exchange Management Shell to assign the certificate.

   Import-ExchangeCertificate -Thumbprint <SHA1 Thumbprint> -Services IIS, SMTP, IMAP, POP
   

   Confirm overwriting existing certificates if prompted.

5. Verify Installation: Access your domain via browser and check the SSL certificate details to ensure correct installation.

Notes:

• Ensure you have the necessary permissions to modify Exchange settings.
• Be cautious when overwriting trusted certificates.
• Common issues include incorrect decoding of certificate files or misassignment of services.