From August 19th 2020, SECTIGO issues SSL certificates with a maximum lifetime of 398 days (13 months) as specified by CA/Browser consortium. SSL certificates with a longer lifetime must be re-issued annually (free of charge). You'll receive reminders via e-mail. SSL certificates issued before August 19th 2020 remain valid until their planned expiry date. Code Signing & S/MIME certificates are not affected and remain valid until their planned expiry date.

Issueing SSL certificates for internal server names (e.g. .local) - Microsoft Exchange Server, DNS, etc.

As per July 2012 SSL certificates for local server names will not longer be issued, accoring to the CA/B Baseline Requirements. This has been decided by the CA/Browser Forum (CA/B) in November 2011.

The official solution is also changing your internal server name to a public domain name and requesting a "regular" SSL certificate for that public name.

You may find further information about the baseline requirements on the official website of the CA/B forum: https://cabforum.org/baseline-requirements/

You may find detailed instructions including "split-brain DNS" here: https://www.codetwo.com/admins-blog/san-certificates-and-split-brain-dns-in-exchange-2013/


Was this answer helpful?

 Print this Article

Also Read

How do i create a CSR (Certificate Sign Request) in Microsoft Exchange 2010? How do i install my SSL certificate in Exchange 2010 server?

YouTube: https://www.youtube.com/watch?v=GD0Ro0etUPQ

Enabling Webserver (WebStation) for HTTP validation under Synology DiskStation Manager

In Synology Diskstation you first have to enable the "WebStation" service. "WebStation" is the...

How to obtain a SSL certificate? How does e-mail authentication work?

After ordering a SSL certificate with InterSSL, you have to place a CSR (Certificate Signing...

Microsoft Exchange server: which SSL to use? What about autodiscover. subdomain?

Symptom: internal access is working properly, but accessing with Outlook from remote locations is...

Can you issue SSL certificates for .cu (Cuba) and .ir (Iran) domains?

COMODO: no, unfortunately not possible. GEOTRUST: no, unfortunately not possible.