Exchange certificate for Exchange 2010

[Koofler]

Does anyone have an recommendations for buying an SSL cert to allow Outlook over http etc?

£150 for 3 years cert is the best I've found so far.

[theboss]

I use RapidSSL for my own certs which seems to be universally trusted... 4 years for £32 if you buy through certain resellers...

If you need Subject Alternative Names or wildcard to support multiple FQDNs on one SSL listener then you'll obviously pay more.

[bitchstewie]

As said you'll pay more for a UCC/SAN or Wildcard cert.

Namecheap are reliable and low cost. https://www.namecheap.com/security/ssl-certificate... is probably a good place to start assuming you want a UCC/SAN cert - Exchange is supposed to support Wildcard certs but some mobile devices can be a bit sniffy apparently.

[Koofler]

I've been pointed to these guys who seem uber cheap: http://www.ssls.com/comodo-ssl-certificates/positi...

Having never gone down this route before, I'm not sure which type I need. It is for a single name domain, for email authentication. Do I need Wild Card for that??

Thanks for the help!

[Randomthoughts]

I highly recommend Wildcard certificates for organisations over around 15 users, because they inevitably find themselves needing more and more as time goes on.

Having said that, strictly speaking Exchange 2010 can be done with one address, so a single cert.

[bitchstewie]

Koofler said:

I've been pointed to these guys who seem uber cheap: http://www.ssls.com/comodo-ssl-certificates/positi...

Having never gone down this route before, I'm not sure which type I need. It is for a single name domain, for email authentication. Do I need Wild Card for that??

Thanks for the help!

When you go to the basket it looks like they are part of Namecheap anyway

Agreed that wildcards are handy, just consider if you're likely to end up using it anywhere else (though tbh for $5 I wouldn't spend too long debating it as you can just get a wildcard if/when you need one).

[richardrsc]

Just to add a little here -

IF you've setup an autodiscover DNS record, you really want a uc cert which contains that and the servers public name. (ie autodiscover.domain.com and exchange.domain.com).. without it you'll get certificate errors.

However, you don't necessarily have to have an autodiscover entry and many servers are setup without one - if that's the case you may as well get any old 5 quid cheapy cert rather than paying the money for a uc cert, as the more expensive one won't give you any benefit.