wfcrr
asked on
The security certificate has expired or is not yet valid
Outlook 2007 keeps giving two pop ups. One says the security certificate has expired or is not yet valid. The other pop up says
There is a problem with the proxy server's security certificate.
Outlook is unable to connect the proxy server remote.contuso.com (Error Code 20).
There is a problem with the proxy server's security certificate.
Outlook is unable to connect the proxy server remote.contuso.com (Error Code 20).
Hi,
did you change certificate, or renewed it, or has it really expired?
What does it say when you go to Outlook Anywhere, in Outlook, in part:
Only connect to proxy servers that have this principal name in their certificate
Same name that you have in certificate?
OA.jpg
did you change certificate, or renewed it, or has it really expired?
What does it say when you go to Outlook Anywhere, in Outlook, in part:
Only connect to proxy servers that have this principal name in their certificate
Same name that you have in certificate?
OA.jpg
what is the mail server at the backend? your own Exchange Server or any public email provider such as outlook.com or Yahoo?
ASKER
We have SBS 2008 and Exchange 2007. I am thinking a certificate has expired, but not sure where to look.
Please run this command in Exchange powershell
Get-ExchangeCertificate | fl IsSelfSigned,CertificateDomains,Thumbprint,NotAfter,Services,Issuer
ASKER
Thanks MAS. Here is the result:
IsSelfSigned : False
CertificateDomains : {CONTUSODC.contuso.local}
Thumbprint : 71D64AC4B360CBFFD714C0CFCB 3C8F51351C 46B4
NotAfter : 8/21/2017 9:28:24 PM
Services : SMTP
Issuer : CN=contuso-CONTUSODC-CA
IsSelfSigned : True
CertificateDomains : {}
Thumbprint : C857D297A965F115FDA3DBA1CB 1B1F851A45 E696
NotAfter : 10/30/2015 1:39:42 PM
Services : None
Issuer : CN="Vision Solutions, Inc.", O="Vision Solutions, Inc.", O
U=Double-Take, C=US
IsSelfSigned : True
CertificateDomains : {}
Thumbprint : 04E264EFA68892C4B358B1AD78 408A2A3754 361
NotAfter : 7/30/2025 1:39:39 PM
Services : None
Issuer : CN=Livewire Certificate
IsSelfSigned : False
CertificateDomains : {remote.contuso.com, contuso.com, CONTUSODC.contuso.local}
Thumbprint : 8FB08EE128AE864FD50E62319C D7D82E89B7 77D
NotAfter : 1/28/2017 7:01:50 AM
Services : IMAP, POP, SMTP
Issuer : CN=contuso-CONTUSODC-CA
IsSelfSigned : False
CertificateDomains : {remote.contuso.com, contuso.com, CONTUSODC.contuso.local}
Thumbprint : D084B0EABFDC5240CD607CCCBB 3EB5CE23B4 23E
NotAfter : 2/9/2015 2:00:45 PM
Services : IMAP, POP, IIS, SMTP
Issuer : CN=contuso-CONTUSODC-CA
IsSelfSigned : True
CertificateDomains : {contuso-CONTUSODC-CA}
Thumbprint : 56C4019FFA17B9FC3C1EF5EA4F E6BB0088B3 7B0
NotAfter : 2/8/2018 6:06:41 PM
Services : None
Issuer : CN=contuso-CONTUSODC-CA
IsSelfSigned : True
CertificateDomains : {WMSvc-WIN-4E0G5ZYHVM}
Thumbprint : B6D1245600183413D8AC989B5C 0EC3613345 A1D
NotAfter : 8/18/2020 2:58:58 PM
Services : None
Issuer : CN=WMSvc-WIN-4E0GA5YHVM
IsSelfSigned : True
CertificateDomains : {contuso-CONTUSODC-CA}
Thumbprint : 1D536F035FEAFCE407735C1279 CED22A1C84 26C
NotAfter : 8/21/2015 1:38:50 PM
Services : None
Issuer : CN=contuso-CONTUSODC-CA
[PS] C:\Windows\system32>
[PS] C:\Windows\system32>
[PS] C:\Windows\system32>
IsSelfSigned : False
CertificateDomains : {CONTUSODC.contuso.local}
Thumbprint : 71D64AC4B360CBFFD714C0CFCB
NotAfter : 8/21/2017 9:28:24 PM
Services : SMTP
Issuer : CN=contuso-CONTUSODC-CA
IsSelfSigned : True
CertificateDomains : {}
Thumbprint : C857D297A965F115FDA3DBA1CB
NotAfter : 10/30/2015 1:39:42 PM
Services : None
Issuer : CN="Vision Solutions, Inc.", O="Vision Solutions, Inc.", O
U=Double-Take, C=US
IsSelfSigned : True
CertificateDomains : {}
Thumbprint : 04E264EFA68892C4B358B1AD78
NotAfter : 7/30/2025 1:39:39 PM
Services : None
Issuer : CN=Livewire Certificate
IsSelfSigned : False
CertificateDomains : {remote.contuso.com, contuso.com, CONTUSODC.contuso.local}
Thumbprint : 8FB08EE128AE864FD50E62319C
NotAfter : 1/28/2017 7:01:50 AM
Services : IMAP, POP, SMTP
Issuer : CN=contuso-CONTUSODC-CA
IsSelfSigned : False
CertificateDomains : {remote.contuso.com, contuso.com, CONTUSODC.contuso.local}
Thumbprint : D084B0EABFDC5240CD607CCCBB
NotAfter : 2/9/2015 2:00:45 PM
Services : IMAP, POP, IIS, SMTP
Issuer : CN=contuso-CONTUSODC-CA
IsSelfSigned : True
CertificateDomains : {contuso-CONTUSODC-CA}
Thumbprint : 56C4019FFA17B9FC3C1EF5EA4F
NotAfter : 2/8/2018 6:06:41 PM
Services : None
Issuer : CN=contuso-CONTUSODC-CA
IsSelfSigned : True
CertificateDomains : {WMSvc-WIN-4E0G5ZYHVM}
Thumbprint : B6D1245600183413D8AC989B5C
NotAfter : 8/18/2020 2:58:58 PM
Services : None
Issuer : CN=WMSvc-WIN-4E0GA5YHVM
IsSelfSigned : True
CertificateDomains : {contuso-CONTUSODC-CA}
Thumbprint : 1D536F035FEAFCE407735C1279
NotAfter : 8/21/2015 1:38:50 PM
Services : None
Issuer : CN=contuso-CONTUSODC-CA
[PS] C:\Windows\system32>
[PS] C:\Windows\system32>
[PS] C:\Windows\system32>
IsSelfSigned : False
CertificateDomains : {remote.contuso.com, contuso.com, CONTUSODC.contuso.local}
Thumbprint : 8FB08EE128AE864FD50E62319C D7D82E89B7 77D
NotAfter : 1/28/2017 7:01:50 AM
Services : IMAP, POP, SMTP
Issuer : CN=contuso-CONTUSODC-CA
IsSelfSigned : False
CertificateDomains : {remote.contuso.com, contuso.com, CONTUSODC.contuso.local}
Thumbprint : D084B0EABFDC5240CD607CCCBB 3EB5CE23B4 23E
NotAfter : 2/9/2015 2:00:45 PM
Services : IMAP, POP, IIS, SMTP
Issuer : CN=contuso-CONTUSODC-CA
Both these certificates are expired.
Please renew the certificate from your contusoDC-CA and import it to the server.
FYI
You need one self signed certificate for inter server communication and you need one certificate with your common name for client communication.
CertificateDomains : {remote.contuso.com, contuso.com, CONTUSODC.contuso.local}
Thumbprint : 8FB08EE128AE864FD50E62319C
NotAfter : 1/28/2017 7:01:50 AM
Services : IMAP, POP, SMTP
Issuer : CN=contuso-CONTUSODC-CA
IsSelfSigned : False
CertificateDomains : {remote.contuso.com, contuso.com, CONTUSODC.contuso.local}
Thumbprint : D084B0EABFDC5240CD607CCCBB
NotAfter : 2/9/2015 2:00:45 PM
Services : IMAP, POP, IIS, SMTP
Issuer : CN=contuso-CONTUSODC-CA
Both these certificates are expired.
Please renew the certificate from your contusoDC-CA and import it to the server.
FYI
You need one self signed certificate for inter server communication and you need one certificate with your common name for client communication.
ASKER
is this the right way to do the self signed? How do I renew the common name cert?
http://www.ncol.net/how-to-renew-a-self-signed-certificate-in-exchange-server-2007/
http://www.ncol.net/how-to-renew-a-self-signed-certificate-in-exchange-server-2007/
ASKER CERTIFIED SOLUTION
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Please check this article. This is for Exchange2010 the same can be applied for 2013.
https://www.experts-exchange.com/articles/13676/Out-Of-office-not-working.html
Thanks
MAS