Cert Management

Openssl link cert to key

openssl pkcs12 -export -certpbe PBE-SHA1-3DES -keypbe PBE-SHA1-3DES -nomac -inkey privatekey.key -in certificate.crt -out domain.name.pfx
For dumb devices like Cisco ASA ...
openssl pkcs12 -export -inkey privatekey.key -in certificate.crt -out domain.name.pfx

ECP Cert import with EMC (ExchangeManagementConsole)

Import-ExchangeCertificate -FileData ([Byte[]]$(Get-Content -Path C:\<PATH> \<Filename> .pfx -Encoding byte -ReadCount 0)) -Password (convertto-securestring -string "<PASSWORT>" -asplaintext -force)

Enable the Services

Enable-ExchangeCertificate -Thumbprint <THUMBPRINT> -Services SMTP,POP,IMAP,IIS

Check if the correct cert is set

Get-ExchangeCertificate | select Thumbprint, Services, NotAfter, Subject, CertificateDomains | where {$_.Services -match "SMTP"} | fl