add services to certificate

Hi Experts,
on my exchange servers (2013) I have a new wildcard certificate installed.
But I am unable to add the new services POP3 and IMAP to it.


warning
 
This certificate with thumbprint 8D449951A07C359DC39BBDE4FA50A188849E3480 and subject '*.domain.at' cannot used for IMAP SSL/TLS connections because the subject is not a Fully Qualified Domain Name (FQDN). Use command Set-IMAPSettings to set X509CertificateName to the FQDN of the service.
Eprs_AdminSystem ArchitectAsked:
Who is Participating?
 
Eprs_AdminConnect With a Mentor System ArchitectAuthor Commented:
I solved it on my end without a new cert.
0
 
Todd NelsonConnect With a Mentor Systems EngineerCommented:
Work with your SSL Cert vendor to change it to a UC/SAN certificate.  You will need to create a new certificate request via Exchange.
0
 
timgreen7077Connect With a Mentor Exchange EngineerCommented:
I always use UCC/SAN certs for exchange. I agree with Todd, get a UCC cert and have the POP and IMAP name spaces added to the cert, and imported it into Exchange and then add those services. i would actually add all the services to the new cert.
0
Has Powershell sent you back into the Stone Age?

If managing Active Directory using Windows Powershell® is making you feel like you stepped back in time, you are not alone.  For nearly 20 years, AD admins around the world have used one tool for day-to-day AD management: Hyena. Discover why.

 
Eprs_AdminSystem ArchitectAuthor Commented:
The services IMAP and POP are still added to the old certificate.
0
 
Eprs_AdminSystem ArchitectAuthor Commented:
I cannot change my wildcard to another certificate.
What else can we do ?
0
 
timgreen7077Exchange EngineerCommented:
purchase another cert.
0
 
timgreen7077Exchange EngineerCommented:
good deal.
0
 
Eprs_AdminSystem ArchitectAuthor Commented:
My wildcard certificate has two subject names:
*.domain.com
domain.com

For exchange services I cannot use *.domain.com
So I used domain.com for IMAP and POP.

After a restart of the services IMAP and POP I was finished.

On the new wildcard certificate I have now all services listed.
POP,IMAP,IIS,SMTP

There is no need to buy a new certificate. This answer was wrong from the experts.
0
Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

All Courses

From novice to tech pro — start learning today.