Thursday, 19 September 2013

Certificate Error in Outlook 2007

You Receive a “Target Principal Name is Incorrect” Certificate Error in Outlook 2007 When Connecting to Either POP3 or IMAP4 on Exchange2007/Exchange2010.

The problem is due to the order in which the DNS names are listed in the Subject Alternative Name field on the Exchange certificate, and the way that Outlook 2007 reads this field. The first DNS name in the list does not match the server’s public FQDN (Fully Qualified Domain Name). Outlook 2007 reads only the first DNS name, and then compares it to the name of the POP, IMAP, or SMTP server that it is configured to connect to. The two names do not match.

to fix this issue, you need to have pop/imap/SMTP domain name should be first in the SAN domain listing.  alternate solution, use one common name for for all services POP/IMAP/SMTP services.