Hi,

I just installed an Exchange 2013 SP1 server and applied for a single domain digital certificate instead of a SAN one.

The problem is that in the certificate that was purchased I only have mail.domain.com.

I should have bought a SAN certificate with mail.domain.com and autodiscover.domain.com.

When I ran the exchange connectivity analyzer I get this error:

Host name domain.com doesn't match any name found on the server certificate CN=mail.domain.com, OU=Domain Control Validated.      

Is there any way around this playing with zone file records?

I do not want to buy a new certificate just because I missed a name.

Thanks and regards

Alfred

                         

• Edited by Alfred-B Thursday, September 03, 2015 5:38 AM

4.Using an SRV record

As for a workaround for you, you can deploy to use the SRV record (Set SRV record to mail.domain.com)

https://support.microsoft.com/en-us/kb/940881

Hi Simon,

thank you VERY MUCH for such a quick answer!

Unfortunately the domain hosting provider Control Panel does not support SRV records fully.

I do not have  the Service and Protocol record types, just TTL, Priority, Weight, Port, Target.

Regards

Alfred

Hi Simon, I managed to create a SRV record as _autodiscover._tcp.domain.com and pointed it to the target mail.domain.com. I waited a while, then checked it with nslookup, type=SRV and it reports back domain.com. Then I tried to add account to Outlook 2010, the searching of the email address switches to unencrypted and finally fails, cannot find it. Do I have to set a SRV record on my internal windows 2012 DNS server? Also is there anything I have to do in ECP under servers for Outlook Anywhere? Thanks. Alfred

• Edited by Alfred-B 17 hours 25 minutes ago