Windows Server has a CA built in. It's probably going to be easier for you to do it that way. IIRC, Exchange actually has a "automatically get a certificate from my domain" button somewhere.
_________________________
Bitt Faulk