Exchange Server 2010 ActiveSync SSL 證書問題

我們遇到了與 Exchange Server 2010 Activesync 相關的問題。我的問題是；當我從外部連接到 activesync 時，我收到以下錯誤。

ExRCA is testing Exchange ActiveSync.
The Exchange ActiveSync test failed.

Test Steps

Attempting to resolve the host name mail.xxxxx.com in DNS.
The host name resolved successfully.

Additional Details
IP addresses returned: xx.0.x3.4
Testing TCP port 443 on host mail.x.com to 
ensure it's listening and open.
The port was opened successfully.
Testing the SSL certificate to make sure it's valid.
The SSL certificate failed one or more certificate validation checks.

Test Steps

Validating the certificate name.
Certificate name validation failed.
Tell me more about this issue and how to resolve it

Additional Details
Host name mail.x.com doesn't match any name found 
on the server certificate CN=xxxxxx.

提前感謝您的所有幫助。

如果您要從外部連接的 DNS 名稱（例如 mail.x.com）不是為 Exchange 配置的 SSL 證書上的名稱之一（如果您就是這樣發布 Exchange，則為 ISA/TMG），那麼您將看到那個錯誤。

Exchange 使用自簽名 SSL 證書安裝，但您需要將其替換為適當的 SAN 證書以用於此類外部訪問場景，否則您將面臨配置和支持問題的噩夢。

以下是為 Exchange 2010 設置 SSL 證書的一些指南。

http://exchangeserverpro.com/configure-an-ssl-certificate-for-exchange-server-2010

引用自：https://serverfault.com/questions/234356