We have built a test lab (Test.lab) for Exchange 2010 Migration and setup Exchange 2010 with DAG.
While generating certificates using the below Cmdlet and getting the actual cert file from Digital batch( Our Internal CA ) of the production server (Production.com), we observed the parameter "Subject Alternative Name" is missing in it.
Still when we import the cert by the below Cmdlet we are receiving certificate error and unable to access autodiscover,pop,IMAP and OWA services.
I would highly appreciate if you can clarify the below
1. Can i generate a certificate for other forest which is Trusted.
Production.com server to generate cert to Test.lab
2. If the SAN is missing in the certificate can we still use for the services which we are supposed to.
3. We have taken a copy of default Self signed Exchange certificate and deleted . When we import it again , getting the below status.
" This CA Root certificate is not trusted because it is not in the Trusted Root Certification Authorities store. "
Please help to figure out the issue.