Hello,

I know this may a little off subject, but I didn't know where to put
it. I just started for a company, and we have some DNS issues for our
main website. The company purchased a SSL certificate under the wrong
name, so now when we view our mail access page
"mail.domain-name.com/exchange" we get a certificate error. I know I
should be able to use this SSL certificate at our domain. What DNS
record should I add at our Domain Registration site so that I no longer
recieve an error?

Thanks

The certificate has to exactly match the server's fqdn.

--
Paul Bergson
MCT, MCSE, MCSA, Security+, BS CSi
2003, 2000 (Early Achiever), NT

http://www.pbbergs.com

Please no e-mails, any questions should be posted in the NewsGroup
This posting is provided "AS IS" with no warranties, and confers no rights.

<zylinius1983@gmail.com> wrote in message
news:1157114718.656220.222130@i3g2000cwc.googlegro ups.com...
> Hello,
>
> I know this may a little off subject, but I didn't know where to put
> it. I just started for a company, and we have some DNS issues for our
> main website. The company purchased a SSL certificate under the wrong
> name, so now when we view our mail access page
> "mail.domain-name.com/exchange" we get a certificate error. I know I
> should be able to use this SSL certificate at our domain. What DNS
> record should I add at our Domain Registration site so that I no longer
> recieve an error?
>
> Thanks
>

so we will need to get a new certificate then?

<zylinius1983@gmail.com> wrote in message
news:1157116870.111184.170130@b28g2000cwb.googlegr oups.com...
> so we will need to get a new certificate then?


In general: Yes.

You might be able to request it be re-issued with lower
or no cost.

--
Herb Martin, MCSE, MVP
Accelerated MCSE
http://www.LearnQuick.Com
[phone number on web site]

>

zylinius1983@gmail.com wrote:
> so we will need to get a new certificate then?

Not necessarily, create a record in DNS that resolves to the OWA website IP
address. SSL certificates can be pretty expensive, depending on who you get
it from, and I'm not sure they'll issue a replacement certificate because
you used the wrong name. How badly did the miss the name?
What you can do is this, create a separate website in IIS, for
http://mail.domain-name.com, you don't need any pages in this website. On
the Properties of this website, select the Home Directory tab, select the
option for "A redirection to a URL" and enter
https://fully-qualified-SSLCertname/exchange just make sure you have records
in DNS that resolve the fully-qualified-SSLCertname to the IP of the OWA
website.

--
Best regards,
Kevin D. Goodknecht Sr. [MVP]
Hope This s
===================================
When responding to posts, please "Reply to Group"
via your newsreader so that others may learn and
benefit from your issue, to respond directly to
me remove the nospam. from my email address.
===================================
http://www.lonestaramerica.com/
http://support.wftx.us/
http://message.wftx.us/
===================================
Use Outlook Express?... Get OE_Quotefix:
It will strip signature out and more
http://home.in.tum.de/~jain/software/oe-quotefix/
===================================
Keep a back up of your OE settings and folders
with OEBackup:
http://www.oe.com/OEBackup/Default.aspx
===================================