[Updated] How to Renew Exchange 2010 Multiple Domain Certificate (GoDaddy UCC) =============================================================================== 1. Configure Spit-Brain DNS or Pin-Point DNS zones 2. Configure Exchange Virtual Directories #Store Exchange 2010 internal and public names in vars $Ex10_Internal = "E-10.netometer.local" $Ex10_Public = "mail.netometer.com" #Check and set the Autodiscover InternalUri Get-ClientAccessServer -Identity $Ex10_Internal | FL *Uri Get-ClientAccessServer -Identity $Ex10_Internal | Set-ClientAccessServer -AutoDiscoverServiceInternalUri "https://$Ex10_Public/Autodiscover/Autodiscover.xml" #Check and set the Web Services URL Get-WebServicesVirtualDirectory -Server $Ex10_Internal | FL Get-WebServicesVirtualDirectory -Server $Ex10_Internal | Set-WebServicesVirtualDirectory -InternalUrl "https://$Ex10_Public/EWS/Exchange.asmx" -InternalNLBBypassUrl "https://$Ex10_Public/EWS/Exchange.asmx" -ExternalUrl "https://$Ex10_Public/EWS/Exchange.asmx" =========================================================================== CA / Browser Forum Baseline Requirements, v. 1.1.56 (as of 2931 July 2013) https://cabforum.org/baseline-requirements-documents =========================================================================== Also as of the Effective Date, the CA SHALL NOT issue a certificate with an Expiry Date later than 1 November 2015 with a subjectAlternativeName extension or Subject commonName field containing a Reserved IP Address or Internal Server Name. Effective 1 October 2016, CAs SHALL revoke all unexpired Certificates whose subjectAlternativeName extension or Subject commonName field contains a Reserved IP Address or Internal Server Name.