Last weekend I did a swing migration from Exchange 2003 to Exchange 2010. It all went fine, but now my users are getting a Security Alert ~ "The name on the security certificate is invalid or dose not match the of the site." The web-mail part works, and internal part works, but gives that message.

The external name on the SSL cert is [mail.example.com], and the internal name is [exchange2010.local.example.com].

The only two answer I have seen are adding the internal name of the server to the SSL. I would rather not show my internal DNS name. The other answer was to disable SSL, but I didn't it didn't explain how to disable it. Any suggestions?

Edit I did a Best Practices Analyzer and found this..

> 
> The subject alternative name (SAN) of SSL certificate for
>  <https://exchange2010.local.example.com/Autodiscover/Autodiscover.xml>
>  does not appear to match the host address. Host address:
>  exchange2010.local.example.com. Current SAN: DNS
>  Name=mail.example.com.
> 
> 
> The subject alternative name (SAN) of SSL certificate for
>  <https://exchange2010.local.example.com/EWS/Exchange.asmx> does not
>  appear to match the host address. Host address:
>  exchange2010.local.example.com. Current SAN: DNS
>  Name=mail.example.com.
> 
> 
> The subject alternative name (SAN) of SSL certificate for
>  <https://exchange2010.local.example.com/Microsoft-Server-ActiveSync>
>  does not appear to match the host address. Host address:
>  exchange2010.local.example.com. Current SAN: DNS
>  Name=mail.example.com.
> 
> 
> The subject alternative name (SAN) of SSL certificate for
>  <https://exchange2010.local.example.com/owa> does not appear to match
>  the host address. Host address: exchange2010.local.example.com.
>  Current SAN: DNS Name=mail.example.com.
> 
> 
> 

Edit it's working! You need to make A DNS change; in my case CNAME mail.example.com -> exchange2010.local.example.com you also need to do the following power shell commands.

```
Set-AutodiscoverVirtualDirectory -Identity * –internalurl “https://mail.example.com/autodiscover/autodiscover.xml”
Set-ClientAccessServer –Identity * –AutodiscoverServiceInternalUri “https://mail.example.com/autodiscover/autodiscover.xml”
Set-webservicesvirtualdirectory –Identity * –internalurl “https://mail.example.com/ews/exchange.asmx”
Set-oabvirtualdirectory –Identity * –internalurl “https://mail.example.com/oab”
Set-owavirtualdirectory –Identity * –internalurl “https://mail.example.com/owa”
Set-ecpvirtualdirectory –Identity * –internalurl “https://mail.example.com/ecp”
Set-ActiveSyncVirtualDirectory -Identity * -InternalUrl "https://mail.example.com/Microsoft-Server-ActiveSync"

```