Hi ! we have about ten accepted domains. for some reasons we can not and we do not want buy certificate. is it possible to use different certs for our domains. i want to use self-signed cert for some of them and 3rd part valid certs for some other important ones. is that ok ? is it just done by creating csr and choose the important ones and then send it to the cert provider ? and then after import it will be activated for those domains ? and tell exchange self-signed for the others ? thanks

Hi there, I think it is impossible because the SMTP service can bind with one and only certificate at a time unless you have multiple HUB/EDGE, and you specific the HUB for specific mailboxes. By the way, is it hosted server? Fiona Liao TechNet Community Support

Hi there, I think it is impossible because the SMTP service can bind with one and only certificate at a time unless you have multiple HUB/EDGE, and you specific the HUB for specific mailboxes. By the way, is it hosted server? Fiona Liao TechNet Community Support Hi Fiona ! hosted ? if you mean is it inside our company or not i should say yes ! it is hosted by our company yes we have an exchange organization including 7 servers (2 mailboxes, 3 hub/cas and 2 edges) but we have not limited a domain to a specific hub ! and they are using a domain CA now ! but we have problems with external people (they get warnings) and also iPhones do not trust to this certificate (and i think this is why we have problems with activesync and ..) so you mean these certificates are protocol (service) based ? and if so, how can we implement the best solution (price, security, availability, ...)

I am still waiting for help in this issue can we have different certificate for different accepted domains ? and if no, what is the solution ? have multiple CAS servers and put accepted domains on them (ones we do not want a certificate in some and the others which we need a cert for them on another server ?) does this help us ? and can we tell exchange to use this cas for these domains and that cas for those domains ??

I am still waiting for help in this issue can we have different certificate for different accepted domains ? and if no, what is the solution ? have multiple CAS servers and put accepted domains on them (ones we do not want a certificate in some and the others which we need a cert for them on another server ?) does this help us ? and can we tell exchange to use this cas for these domains and that cas for those domains ??