Use the exisintg CSR from within Surgemail and paste it into the CSR window at digicert and request the duplocatye cert for the domain, the see below downlaod the cert as a single .pem file containing all the certs then paste this into surgemail