After working OK for 3 weeks or so, the POP and IMAP connections started failing. In a running client, it adds the error code 0x800CCC1A. When the server was first installed, it started doing that and it was resolved when I installed a valid CA certificate. Outlook Anywhere and OWA continue to work, both inside and outside, and we never get any certificate mismatch errors. Oddly enough, I can send email with a POP (or IMAP) account but not receive. Since this seemed to point to the certificate, I have double checked it. There are 4 certs, 3 are self signed: the Exchange Server Auth, Exchange Delegation and WMSVC. The 4th is the SAN cert, from a CA. I removed all services from the 3 self signed certs and the CA cert has all 4 services. The Auth Cert keeps giving itself back the SMTP but the failure occurs even if I remove that cert. I have not found any errors in the event log that match the time of testing.
We are running Exchange 2013, CU7, on a 2012 R2 Std Server. The DC is a 2012 R2 Essentials server.
Any suggestions appreciated.