Reassigned/Reissued SSL now getting error in Outlook

I had an issue similar to this a couple days ago... and I initially looked through this article (https://social.technet.microsoft.com/wiki/contents/articles/13916.how-to-use-a-self-signed-certificate-in-exchange-2010.aspx) to figure out the solution.  (granted this was through a Self-Signed CA)....)

And in doing this and following the exact instructions in the article, I got the exact message you were getting.

I'm not sure if you create the CSR from the Exchange interface or from the Certificates MMC, but for Exchange, you will need: Digital Signature, Key Encipherment, and Server Authentication, and it needs to be 2048 bit and an Exchange Key (as opposed to Signature)  -- Here's a screencast that shows how to create the CSR correctly:  http://www.netometer.com/video/misc/SAN-request/ (not needed if you're using the Exchange console to create it though .. but is good for reference anyway)

When you download the cert, try to download it as a WebCertificate, and DER encoded instead of Base 64. (the article above states Base 64, but what worked for me was getting the DER Encoded. Give that a shot and see if it works for you.

Hi and thanks for your response,

I received the cert from GoDaddy using a CSR.  This issue is only occurring on systems that has been using Outlook/Exchange prior to the reassign/reissue.  If I make a new connection from a new PC, I do not get the error.

Please advise.

Have a great day,

Don

Hi,

This error could occur if the host name used for connections is not added as a Subject Alternate Name in the certificate. For example, if you organization is using the host name webmail.companyname.com for accessing Outlook Web App and this name is not added to the certificate as a SAN then this error can get triggered. Please check if there has been any changes of host names used for connection and if it is not updated in the certificate.

Please refer the following articles for more information.

http://autodiscover.wordpress.com/2010/07/03/exchange-server-what-are-the-names-required-for-my-certificate/

http://exchangeserverpro.com/configure-an-ssl-certificate-for-exchange-server-2010/

The issue is that when I reissued the SSL, I did not include .local SANS because GoDaddy says they are not longer supported.

I've requested that this question be closed as follows:

Accepted answer: 0 points for GEMCC's comment #a39837920

for the following reason:

Issue resolved

I am objecting to the question being closed in the manner requested.

In my last post I stated:

"If your previous SSL certificate had the server's real name on it, then it has probably been removed by the SSL provider because they are no longer allowed."

That is the reason that is being asked for the question to be closed.

Because he wants the points.