in Exchange server 2016 I assigned ssl cert it is "INVALID"

I want to assign SSL Certificate to my exchagne server 2016 via certificate authority from active directory,
all of the steps, done in proper way,  it show " invalid"
please help me

tnx
R. Rahimi
Ramazan RahimiIT ManagerAsked:
Who is Participating?

[Product update] Infrastructure Analysis Tool is now available with Business Accounts.Learn More

x
I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

Hasin Ahmed ChoudharyExchange AdministratorCommented:
Try to import Root certificate also under Personal store. make sure complete chain of Cert is present on server.
0

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
MAS (MVE)EE Solution Guide - Technical Dept HeadCommented:
HI Ramazan Rahimi,
As commented by Hasin Ahmed Choudhary please try to import root CA certificate. i.e. Download the certificate chain.
Please check this on how to use internal CA for Exchange. This is for Exchange2013 but the same applies for Exchange 2016.
https://practical365.com/exchange-server/exchange-2013-ssl-certificate-private-certificate-authority/

Use this if you want to generate new CSR.
https://www.experts-exchange.com/articles/28662/Easy-CSR-creation-Exchange-2007-2010-and-2013.html
Submit the CSR using above and complete it using below
https://practical365.com/exchange-server/exchange-2016-complete-pending-ssl-certificate-request/

Using internal CA certificate is not a good idea. Maybe you will save $$ but for that you have to work worth $$$.
I strongly suggest you to buy a cheap certificate for $30-50 and make your life easy.
Please check this as well. You can chat with them and request for discount as well.  i.e. Multiple Domains UCC - $124.99/yr
secureserver.net


Thanks
MAS
1
MaheshArchitectCommented:
The reason certificate shows invalid because either it cannot reach Certificate authority CRL revocation point or certificate chain is not trusted
0
Hasin Ahmed ChoudharyExchange AdministratorCommented:
No further response from Author
0
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today
Exchange

From novice to tech pro — start learning today.