Hi,We have three sites, each with an exchange 2007 server (a-e2k7, b-e2k7, c-e2k7) - the primary site is a-e2k7 and also runs OWA. Recently we bought a trusted SSL cert to secure OWA without the security warning. After I bound this cert in IIS (version 7.5), outlook clients started to receive the following warning:Information you exchange with is site cannot be viewed or changed by others. However there is a problem with the site's security certificate.The problem is that 'The name on the security certificate is invalid or does not match the name of the site'.When I view the certificate it's the new certificate with the public URL.If I change the binding back on IIS the I'll get the security warning on the public side - is there a way to work around this?Mark

What names include in your certificate?http://okrylov.wordpress.com

Hi,It's just the public name - I assumed that's all that would be needed?Mark

Read this article: http://msexchangeteam.com/archive/2007/09/04/446918.aspxMVP Exchange Server from Russia http://okrylov.wordpress.com

You have probably purched a single name certificate. I recommend that you purchase a SAN/UCC certificate, which can have multiple names. With this type of certificate you will not need to change the default addresses of Exchange's services. It makes for simpler administration and you will not have to keep notes of your changes.See the following articles:http://msexchangeteam.com/archive/2007/07/02/445698.aspxhttp://blog.sembee.co.uk/archive/2008/05/30/78.aspx

Yes, we suggest you use a SAN certificate with multiple Subject Alternative Names. Please read the article provided by the friends above.