The default self - signed certificates have one year before they expire.
As previously discussed, it is possible to request a certificate with multiple names. This is likely to be the
most common type of certificate for Exchange Server 2007.
There are a few parameters worth discussing in more detail before generating the certificate for our test
domain, exchangeexchange.com .
First is the includeaccepteddomain parameter. This includes all of the organization ??™ s DNS names on
the request. For example, the test CAS is joined to the Active Directory domain ExchangeExchange
.local . Figure 6 - 5 shows the effects of setting this parameter to true on the left and false on the right.
The request will have both exchangeexchange.com and ExchangeExchange.local .
Figure 6-5
Next is the includeautodiscover parameter. This will append autodiscover to the list of Subject
Alternative Names. This is just a convenience, because this can be manually added to the domainname
parameter. If an Autodiscover domain is already included in the domainname parameter, it will not add
autodiscover twice.
Finally, the domainname parameter sets the list of Subject Alternative Names. Figure 6 - 6 shows the result
of setting the domainname parameter to webmail.exchangeexchange.com, Autodiscover
.exchangeexchange.
Pages:
248
249
250
251
252
253
254
255
256
257
258
259
260
261
262
263
264
265
266
267
268
269
270
271
272