Microsoft Exchange

Install new Re-Issue public ssl Certificate on Microsoft Exchange 2013/2016/2019.


Download Certificate bundle from public cert provider usually it downloaded in zip format with 3 files.

  1. Root.crt
  2. Intermediate.crt
  3. ServerCertificate.crt


Type below commands to Install New updated certificates.

certutil -addstore my ServerCertificate.crt (or .cer)
certutil -addstore ca intermediate.crt (or .cer)

Note: All of the commands should complete successfully with the following message: CertUtil: -addstore command completed successfully.

Open a Windows Explorer window, browse location that copied certificates double-click the file ServerCertificate.crt.

On the certificate information window that opens, select the Details tab, scroll down and select the Thumbprint field from the list.

The Thumbprint will appear in the box below; select the thumbprint and copy to clipboard (click anywhere in the box, then press Ctrl+A followed by Ctrl+C on the keyboard)

Return to the command prompt window and run the following command – paste in the thumbprint as indicated:

certutil -repairstore my "Thumbprint"

The command should similar to:

certutil -repairstore my "00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f"


If the command completes successfully, the following message will appear:

CertUtil: -repairstore command completed successfully.


Thanks 🙂 🙂 🙂