Hi all,

I have a question regarding the SAN and the domain names that will be included in certificate's SAN. The case is as follows:

Server is Exchange Server 2013. Accepted domains are domain111111.com and domain222222.com.

MX record points to mail.domain111111.com, on the public DNS I nave created CNAME record for Autodiscover

autodiscover.domain111111.com. All users have an email account, which is  set at @domain222222.com.

I need to create new certificate request and I wonder whether to include domain domain222222.com in the SAN or to create the

request only with mail.domain111111.com as a common name and autodiscover.domain111111.com as a SAN.

• Edited by Anton Vasilev 16 hours 49 minutes ago

Hi,

As long as you use domain222222.com as the primary email address, the certificate should have the names mail.domain222222.com and autodiscover.domain222222.com

yes you will need both names in the SAN server or use *.wildcard cert

Hi ,

Please have a look in to the below mentioned thread .

https://social.technet.microsoft.com/Forums/office/en-US/fef8dd42-00f7-4e0c-b0a3-5b518ba45b8f/accepted-domains-in-exchange-san-certificate?forum=exchangesvrdeploy