UC Certificate SANs Exchange 2010
Internal Names Note: You can no longer include internal names/reserved IP address in your certificates. All publicly trusted SSL Certificates issued to internal names and reserved IP addresses will expire before November 1, 2015.
What Subject Alternate Names (SANs) should be included in an Exchange 2010 Certificate?
Finding the SANs that need to be included in your Unified Communications (UC) Certificate for Exchange 2010 has been simplified. You can use the Microsoft Exchange Certificate Wizard to generate a list of SANs that should be included in your UC Certificate.
Here are a few tips to keep in mind when creating your CSR:
However, if this is not the case, review the following:
* If you are using different URLs, make sure to include entries for those as well.
* If you are using more than one CAS server, make sure to include the fully qualified domain name of every CAS server that is involved.
Using the Microsoft Exchange Certificate Wizard
Launch the the wizard. On the Exchange Configuration page, check the services/roles that are applicable to your environment. Your server will then suggest a list of SANs to use in your certificate. Please confirm that the information is accurate and does not include any internal names.