I realized that I left autodisover.domain.com off of the SAN names for my Exchange 2010 server. The IMAP, POP, IIS, and SMTP services use this certificate. It is issued by a trusted public CA. I renew the certificate with the CA for free in a few minutes. I thought I should renew the existing certificate on the Exchange server and adding the necessary SAN name. Is this correct or should I create a new exchange certificate?