I need assistance to make a correction to the Subject Alternate Names (SAN) in my UCC SSL. I hope that if I provide the network topology, an expert will be able to recommend the correct names for the SANs. The internet domain name is distance.com and the internal domain name is depth. The server name is Honeycomb. Based on some initial recommendation from the DNS provider (but which they won't support technically) I set the certificate common name as remote.distance.com and Subject alternative names honeycomb.exchange.depth exchange.distance.com autodiscover.distance.com distance.com The problem is that Exchange is not working, generating an error that states: Microsoft Exchange couldn't find a certificate that contains the domain name HONEYCOMB.depth.local in the personal store on the local computer. Therefore, it is unable to support the STARTTLS SMTP verb for the connector send connection with a FQDN parameter of HONEYCOMB.depth.local. My question is: what would be the required names for the SAN? I mean, which of the names from the existing 4 SAN, should become HONEYCOMB.depth.local Second part: given the network topology I described, am I using the correct name for the autodiscover function? I think it may also need to be corrected, so that mobile devices can connect with the mail server.

Software/Hardware used: