\n<\/strong><\/div>\n
Certificate Authorities, browsers, and industry groups are constantly improving standards. The updated Baseline Requirements for the issuance of certificates (BR v1.1.6<\/a>) include some of the changes that you might find out when requesting a new certificate or renewing an existing one.<\/p>\n Baseline Requirements for the Issuance and Management of Publicly-Trusted Certificates, Version 1.1.6<\/span> <\/p>\n \u2022 Effective 1 October 2016, CAs SHALL revoke<\/span> all unexpired Certificates whose SAN or Subject Common Name field contains a Reserved IP Address or Internal Server Name<\/p>\n In the updated version of our Screencast <\/a> Tweet #Exchange2010<\/a> Follow @netometer<\/a><\/p>\n In the updated version of our Screencast we address these requirements by: Configuring Split-Brain DNS or Pin-Point DNS zones, Modifying the Exchange 2010 internal URL, Requesting and installing a GoDaddy UCC that doesn\u2019t use our Internal Server\u2019s name.<\/p>\n","protected":false},"author":1,"featured_media":1276,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"_sitemap_exclude":false,"_sitemap_priority":"","_sitemap_frequency":"","footnotes":""},"categories":[18],"tags":[394,397,395,396],"_links":{"self":[{"href":"https:\/\/www.netometer.com\/blog\/index.php?rest_route=\/wp\/v2\/posts\/1206"}],"collection":[{"href":"https:\/\/www.netometer.com\/blog\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.netometer.com\/blog\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.netometer.com\/blog\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.netometer.com\/blog\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=1206"}],"version-history":[{"count":0,"href":"https:\/\/www.netometer.com\/blog\/index.php?rest_route=\/wp\/v2\/posts\/1206\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.netometer.com\/blog\/index.php?rest_route=\/wp\/v2\/media\/1276"}],"wp:attachment":[{"href":"https:\/\/www.netometer.com\/blog\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=1206"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.netometer.com\/blog\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=1206"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.netometer.com\/blog\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=1206"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}
\nAdopted by CA\/Browser Forum<\/a> (includes over 30 CA members and major browser vendors: Microsoft, Apple, Mozilla, Google, Opera) Effective as of July 29, 2013
\n\u2022 CA SHALL NOT<\/span> issue a certificate with an Expiry Date later than 1 November 2015 with a SAN or Subject Common Name field containing a Reserved IP Address or Internal Server Name<\/span><\/p>\n![\"[Updated]](\"https:\/\/www.netometer.com\/blog\/wp-content\/uploads\/video-icon.png\"){kind=icon}
<\/a><\/strong>, we address these requirements by:
\n\u2022 Configuring Split-Brain DNS or Pin-Point DNS zones on the local network. We demonstrate both approaches, so you can choose the one that fits better your needs.
\n\u2022 Modifying the Exchange 2010 internal URL
\n\u2022 Requesting and installing a GoDaddy Multiple Domain certificate (UCC) that doesn\u2019t use our Internal Server\u2019s name.<\/p>\n![\"Updated-How-to-Renew-Exchange-2010-Certificate\"](\"https:\/\/www.netometer.com\/blog\/wp-content\/uploads\/Updated-How-to-Renew-Exchange-2010-Certificate.png\")
<\/a><\/p>\n\n