3 CAS and separate 3 MBX DAG is my 2013 environment. Since most of the end user systems are not connected to my Domain, I had deployed 3rd party SAN certificate where local CAS server FQDN's also included and enabled internally/externally.

Recently I deployed an Arcserve backup and while restoring mailbox contents on mailbox servers, seems its failed with certificate issue. I assume it is trying to locate a mailbox server FQDN on a certificate and failing. Is it so?

Can we introduce one more local exchange certificate including all the SAN values and enable it for Arcserve?

pl. suggest

Yes you can add SAN values and this will not affect your exchange services

Adding SAN values on 3rd party certificate will let some commercial part, can we introduce an local certificate and enable only for IIS?, will this impact end users? Can we enable service for both the 3rd party and local certificate? 

Hi Sathish

I tried to introduce a new local certificate with all the SAN values and assigned to IIS. Its affecting my internal / external OWA and get in to certificate issues.

Hi Sathish

I tried to introduce a new local certificate with all the SAN values and assigned to IIS. Its affecting my internal / external OWA and get in to certificate issues.

If you issued a cert from your local CA and the machines that you are accessing Outlook/OWA do not trust the issueing CA, then it is expected that you would get these messages. 

As for your restore, you should not require the FQDN of the mailserver to be on the cert.  What does Arcserve support say about the failure with their software?