Note: do NOT use the Certificates snap-in for the MMC to install the certificate. This will not work for Exchange 2007!
Show installed certificates:
Get-ExchangeCertificate
Show installed certificates with details: Get-ExchangeCertificate | fl IsSelfSigned,NotAfter,Services,Status,CertificateDomains,Thumbprint,SerialNumber
Remove installed certificate:
Remove-ExchangeCertificate -Thumbprint "23423..."
Assign services to certificate:
Enable-ExchangeCertificate -Services 'IMAP, POP, IIS, SMTP' -Thumbprint '6c99cc...'
Un-assign services from certificate:Enable-ExchangeCertificate -Services none -Thumbprint '6c99cc...'
If the certificate isn't enabled for the correct services (S=SMTP, I=IMAP, P=POP, U=Unified Messaging, W=Web/IIS
To renew self-signet certificate:
Get-ExchangeCertificate –Thumbprint “9E6DD4B4EA2865CA9E6C34B42329A9AC994EBF63” | New-ExchangeCertificate