Link to home
Start Free TrialLog in
Avatar of wfcrr
wfcrrFlag for United States of America

asked on

The security certificate has expired or is not yet valid

Outlook 2007 keeps giving two pop ups. One says the security certificate has expired or is not yet valid.  The other pop up says

There is a problem with the proxy server's security certificate.

Outlook is unable to connect the proxy server remote.contuso.com (Error Code 20).
Avatar of M A
M A
Flag of United States of America image

Hi,
Please check this article. This is for Exchange2010 the same can be applied for 2013.
https://www.experts-exchange.com/articles/13676/Out-Of-office-not-working.html

Thanks
MAS
Hi,

did you change certificate, or renewed it, or has it really expired?

What does it say when you go to Outlook Anywhere, in Outlook, in part:
Only connect to proxy servers that have this principal name in their certificate
Same name that you have in certificate?
OA.jpg
what is the mail server at the backend? your own Exchange Server or any public email provider such as outlook.com or Yahoo?
Avatar of wfcrr

ASKER

We have SBS 2008 and Exchange 2007.  I am thinking a certificate has expired, but not sure where to look.
Please run this command in Exchange powershell
Get-ExchangeCertificate | fl IsSelfSigned,CertificateDomains,Thumbprint,NotAfter,Services,Issuer

Open in new window

Avatar of wfcrr

ASKER

Thanks MAS. Here is the result:


IsSelfSigned       : False
CertificateDomains : {CONTUSODC.contuso.local}
Thumbprint         : 71D64AC4B360CBFFD714C0CFCB3C8F51351C46B4
NotAfter           : 8/21/2017 9:28:24 PM
Services           : SMTP
Issuer             : CN=contuso-CONTUSODC-CA

IsSelfSigned       : True
CertificateDomains : {}
Thumbprint         : C857D297A965F115FDA3DBA1CB1B1F851A45E696
NotAfter           : 10/30/2015 1:39:42 PM
Services           : None
Issuer             : CN="Vision Solutions, Inc.", O="Vision Solutions, Inc.", O
                     U=Double-Take, C=US

IsSelfSigned       : True
CertificateDomains : {}
Thumbprint         : 04E264EFA68892C4B358B1AD78408A2A3754361
NotAfter           : 7/30/2025 1:39:39 PM
Services           : None
Issuer             : CN=Livewire Certificate

IsSelfSigned       : False
CertificateDomains : {remote.contuso.com, contuso.com, CONTUSODC.contuso.local}
Thumbprint         : 8FB08EE128AE864FD50E62319CD7D82E89B777D
NotAfter           : 1/28/2017 7:01:50 AM
Services           : IMAP, POP, SMTP
Issuer             : CN=contuso-CONTUSODC-CA

IsSelfSigned       : False
CertificateDomains : {remote.contuso.com, contuso.com, CONTUSODC.contuso.local}
Thumbprint         : D084B0EABFDC5240CD607CCCBB3EB5CE23B423E
NotAfter           : 2/9/2015 2:00:45 PM
Services           : IMAP, POP, IIS, SMTP
Issuer             : CN=contuso-CONTUSODC-CA

IsSelfSigned       : True
CertificateDomains : {contuso-CONTUSODC-CA}
Thumbprint         : 56C4019FFA17B9FC3C1EF5EA4FE6BB0088B37B0
NotAfter           : 2/8/2018 6:06:41 PM
Services           : None
Issuer             : CN=contuso-CONTUSODC-CA

IsSelfSigned       : True
CertificateDomains : {WMSvc-WIN-4E0G5ZYHVM}
Thumbprint         : B6D1245600183413D8AC989B5C0EC3613345A1D
NotAfter           : 8/18/2020 2:58:58 PM
Services           : None
Issuer             : CN=WMSvc-WIN-4E0GA5YHVM

IsSelfSigned       : True
CertificateDomains : {contuso-CONTUSODC-CA}
Thumbprint         : 1D536F035FEAFCE407735C1279CED22A1C8426C
NotAfter           : 8/21/2015 1:38:50 PM
Services           : None
Issuer             : CN=contuso-CONTUSODC-CA



[PS] C:\Windows\system32>
[PS] C:\Windows\system32>
[PS] C:\Windows\system32>
IsSelfSigned       : False
CertificateDomains : {remote.contuso.com, contuso.com, CONTUSODC.contuso.local}
Thumbprint         : 8FB08EE128AE864FD50E62319CD7D82E89B777D
NotAfter           : 1/28/2017 7:01:50 AM
Services           : IMAP, POP, SMTP
Issuer             : CN=contuso-CONTUSODC-CA

IsSelfSigned       : False
CertificateDomains : {remote.contuso.com, contuso.com, CONTUSODC.contuso.local}
Thumbprint         : D084B0EABFDC5240CD607CCCBB3EB5CE23B423E
NotAfter           : 2/9/2015 2:00:45 PM
Services           : IMAP, POP, IIS, SMTP
Issuer             : CN=contuso-CONTUSODC-CA

Both these certificates are expired.
Please renew the certificate from your contusoDC-CA and import it to the server.

FYI
You need one self signed certificate for inter server communication and you need one certificate with your common name for client communication.
Avatar of wfcrr

ASKER

is this the right way to do the self signed? How do I renew the common name cert?

http://www.ncol.net/how-to-renew-a-self-signed-certificate-in-exchange-server-2007/
ASKER CERTIFIED SOLUTION
Avatar of M A
M A
Flag of United States of America image

Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial