1. Log into DigiCert and find the current active wildcard order number.
DigiCert portal: https://www.digicert.com/account/login.php
2. Request duplicate.
3. “upload a CSR” that created from the target server. Remove all SANs, only keep the target server. In the example, only keeping “duosts.mopt.vic.gov.au”
4. Signature hash, select “Sha256WithRSA”, For server platform, for Microsoft web portal, select “Microsoft IIS 10”, for Cisco device, select “Cisco”, for mail server select, “Exchange”
5. Download certificate