We have already demonstrated how to install a trusted 3rd party (commercial) certificate in Exchange 2010
In this Screencast, we will show you how to renew an existing Exchange 2010 SSL certificate. In our demo, we are using a GoDaddy Multiple Domain (UCC) certificate, but the instructions are exactly the same when renewing a single domain SSL certificate.
Some people prefer the graphical user interface - Exchange Management Console, while other specialists favor the command line - Exchange Management Shell. We address both approaches in our Screencasts, when generating the CSR (Certificate Signing Request).
First, we will show you how to generate a renewal CSR in Exchange Management Console, by using the Renew Exchange Certificate option. Most Exchange administrators hit a problem when using this option and we discuss in details how to generate the CSR with the correct encoding.
Another way to generate a CSR, when renewing Exchange 2010 trusted SSL certificate, is using Exchange Management Shell, and we demonstrate this approach in Step2.
At the end of the Screencast, we demonstrate how to export an SSL certificate to a PFX (Personal Information Exchange) file, which can be used later to restore the certificate or install it on a different server.
As usual, we provide the commands used in the Screencast in a text file, which you can download here