Certificate error Outlook 2010/2013 clients

We have a client running Exchange 2010 on a Windows 2012 R2 server with Outlook 2010/2013 clients. It has a UCC certificate from Godaddy! Everything has been fine with this server for months. A week ago the clients started getting certificate errors. The name on the security certificate is invalid or doesn't match the name on the certificate. Here is where it gets weird. The server name listed at the top of the security alert is mail.domainname.com.com ( Notice the extra .com). If you view the certificate it says issued to *.com.com by RapidSSL SHA256 CA - G3. One of my coworkers and I have been over this server and client pc's backwards and forwards and can not find where this certificate is coming from. Other than doing windows updates a couple of weeks ago nothing has changed on this server. HAs anyone got any ideas? The users can click yes to continue but they are getting annoyed with that. I've checked all the DNS entries at Network Solutions and on the local DNS and everything appears fine. I've done the Microsoft Exchange Connectivity tests and everything come back fine. Help Please.
box-bb-carAsked:
Who is Participating?
I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

Will SzymkowskiSenior Solution ArchitectCommented:
Is the certificate path in the proper certificate store? How could your certificate been modified?

Has anything changed on your virtual directories?

Will.
0
David Johnson, CD, MVPOwnerCommented:
someone has installed a rapidssl certificate.. You say you use godaddy which certificates are issued either by godaddy or startfield
0
MAS (MVE)EE Solution GuideCommented:
As commented by David seems Rapidssl certiicate installed.
Please check the certificates installed by the command "Get-Exchangecertifcate"

Please use this article to configure your URLs and clear your outlook errors/warning
http://www.experts-exchange.com/articles/13676/Out-Of-office-not-working.html
0

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
How do you know if your security is working?

Protecting your business doesn’t have to mean sifting through endless alerts and notifications. With WatchGuard Total Security Suite, you can feel confident that your business is secure, meaning you can get back to the things that have been sitting on your to-do list.

cpmcomputersCommented:
Are your Dns entries at network solutions ended with a period (full stop). To ensure they are fully qualified otherwise it will append .com to the entries?
And they will resolve to subdomain.domain.com.com
0
box-bb-carAuthor Commented:
The trouble cert does not appear on any client system, nor on the server when we search by thumbprint. That is the frustrating part. If we could find the certificate we would remove it, or at least have a jumping off point from which to troubleshoot. All certs in exchange are correct in the console. Will verify that we do not have any that appear at the powershell level.

The certificate path does not come into play unless you choose to install the certificate on a client machine, then it installs into a folder of 'Other' if you allow auto install. As stated, it does not appear on the server when we search by thumbprint. Normally this would be an intermediate authority cert. Am wondering if in the Windows updates it may have corrupted some of the root certs
0
box-bb-carAuthor Commented:
Just checked the URL's as suggested by MAS. Sure enough the one for the internal URL for the Web Services virtual directory had an extra .com in it. Not sure why or how that happened. Will have to see if this corrects the issue completely or if something else is going on that is changing that value.
0
MAS (MVE)EE Solution GuideCommented:
Did you reconfigure the URLs as per the article and check?

If still you have error please let us know.
0
box-bb-carAuthor Commented:
Thanks for pointing us in the right direction. Still don't know what caused the url to change but it's been corrected.
0
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today
Exchange

From novice to tech pro — start learning today.

Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.