DigiCertUtil – The Certificate Management & Troubleshooting Tool…

ByRajith Enchiparambil

I was at a customer site last week, working mainly on SAN certificates on Exchange and TMG servers. Exporting and importing the certificate between servers, making sure root and intermediate certificates are correctly installed etc. I was working with a tool that I have used before and thought of sharing it, as it makes working…

I was at a customer site last week, working mainly on SAN certificates on Exchange and TMG servers. Exporting and importing the certificate between servers, making sure root and intermediate certificates are correctly installed etc. I was working with a tool that I have used before and thought of sharing it, as it makes working with certificates much easier.

The tool is DigiCertUtil.exe and is from Digicert. With this tool you can manage, troubleshoot and fix the SSL certificates on your server, all without having to open up a command prompt to run special certutil commands or dig through the MMC Certificate Snap-in.

CertUtil

DigiCertUtil.exe makes it easy to (from Digicert site):

  • See all the SSL certificates installed on your server.
  • Easily view details for each certificate.
  • Fix intermediate certificate problems with one click.
  • Import and Export your certificates to make a backup or move them between servers.
  • Test a certificate to verify its private key is functional.
  • Install a certificate to a pending request.
  • Repair a certificate whose private key exists on the server but is not correctly associated with the certificate.

Download the tool (.exe) here or the zip file here

The good thing is that you can use the tool to manage certificates issued by any company. A must have tool for Exchange admins!

Rajith Enchiparambil

Cloud Architect & Blogger with interests in Microsoft 365, Azure, AWS & PowerShell. I am active on Experts Exchange & TechNet forums and I am a technical author for SearchExchange. Follow me on Twitter, LinkedIn, or Facebook for the latest updates. For consultancy opportunities, drop me a line.

4 Comments

  1. Jens B Fiederer says:

    We need to sign 28 files at the same time (one for each language we support), but when I do “Add Files” and select them all, it only accepts the first 2 or 3 (long file names seem to limit the entry). It is pretty tedious to “Add Files” 14 times in a row. Any alternative?

    Reply
    1. Rajith Enchiparambil says:

      Hi Jens,

      Are you saying you want to cover 28 namespaces in the certificate?

      Thanks

      Reply

  2. Thanks for the info.
    I just want to use this utility to verify authenticity of software installers (digital signature). That’s it. Am I in the correct path? Or I need to use any other program or service?

    Reply
    1. Rajith Jose Enchiparambil says:

      This will do the job CertUser

      Reply

Leave a Reply

Your email address will not be published. Required fields are marked *