Invalid SSL certificate

Posted on 2011-03-07
Last Modified: 2012-05-11
I installed a UCC certificate from GoDaddy on my Exchange 2010. After I installed it on the Exchange sever  our 2007 Outlook users get this error when they open Outllook:
 "The name of the security certificate is invalid or does not match the name of the site"

I googled the error and tried to follow the suggestions but was not sure of the steps in some of the links. I am new to Exchange 2010 and command line. I am trying to find a link that is not so cryptic
Question by:InSearchOf
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 3
  • 2
  • 2
LVL 31

Expert Comment

ID: 35066817
What names do you have on your cert? Which one is it saying doesn't match the certificate? Change the internal URLs to point at a name on your cert that resolves to the internal IP of your CAS server.
LVL 76

Accepted Solution

Alan Hardisty earned 250 total points
ID: 35066946
The names you should have on your UCC Certificate are as follows: (or whatever you want to use)

If you don't have those names in your certificate, please re-key the certificate and include them, then your error should go away.


Author Comment

ID: 35068612
Yes I have to change the internal URLs according to the info I have found researching the error I am just not quite clear on how to do it being that I am new to Exchange 2010 and powershell.

Those are the names I have on my certificate. If I run the " Get-ExchangeCertificate" command I only see IP and WS as the only service assciated with the thumb print. When I installed the cert according to the instructions provided me by GoDaddy I did associate IIS, SMTP and a couple of other services as well. Did I execute  the wrong command or miss something?
Online Training Solution

Drastically shorten your training time with WalkMe's advanced online training solution that Guides your trainees to action. Forget about retraining and skyrocket knowledge retention rates.

LVL 76

Expert Comment

by:Alan Hardisty
ID: 35068636
If you purchased a GoDaddy SSL Certificate you should not have to change the internal URL's.

Please advise the name of the site from the error that you are seeing or post a screen-shot of the error.



Author Comment

ID: 35070688
Ok. Waiting for a user to send me a screenshot of the error. So far no errors. I did a restart of the Transport service as well as an IISRESET and so far no complaints.
LVL 31

Assisted Solution

MegaNuk3 earned 250 total points
ID: 35072047
Also have a look at
Get-clientaccessServer | fl Identity, autodiscoverInternalUri
Change that to a name on your cert that resolves internally to the internal IP address of your CAS server (or amend internal DNS so the cert name resolves to the CAS internal IP address)

Author Comment

ID: 35072664
Ok. Thanks for all the help.

Featured Post

Instantly Create Instructional Tutorials

Contextual Guidance at the moment of need helps your employees adopt to new software or processes instantly. Boost knowledge retention and employee engagement step-by-step with one easy solution.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

This article lists the top 5 free OST to PST Converter Tools. These tools save a lot of time for users when they want to convert OST to PST after their exchange server is no longer available or some other critical issue with exchange server or impor…
This article will help to fix the below error for MS Exchange server 2010 I. Out Of office not working II. Certificate error "name on the security certificate is invalid or does not match the name of the site" III. Make Internal URLs and External…
The basic steps you have just learned will be implemented in this video. The basic steps are shown to configure an Exchange DAG in a live working Exchange Server Environment and manage the same (Exchange Server 2010 Software is used in a Windows Ser…
how to add IIS SMTP to handle application/Scanner relays into office 365.

717 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question