CmdID / PowerShell / Cmdlets / New
New-ExchangeCertificate
Use the New-ExchangeCertificate cmdlet to create and renew self-signed certificates, and to create certificate requests (also known as certificate signing requests or CSRs) for new certificates and certificate renewals… Exchange PowerShell reference
From the Exchange PowerShell reference 20 parameters Its page in the reference
Parameters
Show its 20 parameters
-BinaryEncodedThe BinaryEncoded switch specifies whether to encode the new certificate request by using Distinguished Encoding Rules (DER).-Confirm, -cfThe Confirm switch specifies whether to show or hide the confirmation prompt.-DomainControllerThe DomainController parameter specifies the domain controller that's used by this cmdlet to read data from or write data to Active Directory.-DomainNameThe DomainName parameter specifies one or more FQDNs or server names for theSubject Alternative Name field (also known as the Subject Alt Name or SAN field) of the certificate request or self-signed…-ForceThe Force switch hides warning or confirmation messages.-FriendlyNameThe FriendlyName parameter specifies a friendly name for the certificate request or self-signed certificate.-GenerateRequestThe GenerateRequest switch specifies that you're creating a certificate request for a certification authority (CA).-IncludeAcceptedDomainsThe IncludeAcceptedDomains switch specifies that all accepted domains in the Exchange organization are included in the Subject Alternative Name field of the certificate request or self-signed certifi…-IncludeAutoDiscoverThe IncludeAutoDiscover switch specifies whether to add a Subject Alternative Namevalue with the prefix autodiscover for each accepted domain in the Exchange organization.-IncludeServerFQDNThe IncludeServerFQDN switch specifies that the FQDN of the Exchange server is included in the Subject Alternative Name field of the new certificate request or self-signed certificate.-IncludeServerNetBIOSNameThe IncludeServerNetBIOSName switch specifies that the NetBIOS name of the Exchange server is included in the Subject Alternative Name field of the new certificate request or self-signed certificate.-InstanceThis parameter is deprecated and no longer used.-KeySizeThe KeySize parameter specifies the size (in bits) of the RSA public key that's associated with the new certificate request or self-signed certificate.-PrivateKeyExportableThe PrivateKeyExportable parameter specifies whether the certificate has an exportable private key, and controls whether you can export the certificate from the server (and import the certificate on…-RequestFileThe RequestFile parameter specifies the name and path of the certificate request file.-ServerThe Server parameter specifies the Exchange server where you want to run this command.-ServicesThe Services parameter specifies the Exchange services that the new self-signed certificate is enabled for.-SubjectKeyIdentifierThe SubjectKeyIdentifier parameter specifies the unique subject key identifier for a newself-signed certificate.-SubjectNameThe SubjectName parameter specifies the Subject field of the certificate request or self-signed certificate.-WhatIf, -wiThe WhatIf switch shows what the command does without making any changes.