Server Fault is a question and answer site for system and network administrators. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

Out of the blue suddenly all outgoing email messages are delayed since yesterday. Exchange generates a warning email stating that delevery is delayed. Troubleshooting the Exchange message queue unearths that the error is 'server does not support secure connections' I did not touch any settings recently, the server's third party certificate is valid through 2013.

What is happening?

EDIT: I checked the Certicicate using Get-ExchangeCertificate | fl. I found a few self-issued certificates that were valid, but my comercially issued certificate is qualified as invalid (I removerd the SN en the thumbprint:

AccessRules        : {System.Security.AccessControl.CryptoKeyAccessRule, System
                     .Security.AccessControl.CryptoKeyAccessRule, System.Securi
                     ty.AccessControl.CryptoKeyAccessRule, System.Security.Acce
CertificateDomains : {,} 
HasPrivateKey      : True
IsSelfSigned       : False
Issuer             : CN=EssentialSSL CA, O=COMODO CA Limited, L=Salford, S=Grea
                     ter Manchester, C=GB 
NotAfter           : 20-9-2013 1:59:59 
NotBefore          : 19-9-2008 2:00:00 
PublicKeySize      : 1024 
RootCAType         : Unknown 
SerialNumber       : (removed) 
Services           : IIS, SMTP 
**Status             : Invalid** 
Subject            :, OU=EssentialSSL, OU=Domain Control Valida
Thumbprint         : (removed) 

So, what do I do now?

share|improve this question

migrated from Oct 5 '11 at 0:52

This question came from our site for computer enthusiasts and power users.

Does outgoing email go direct to recipients mail servers, or via a smarthost type setup, where it goes to an external server first, which then delivers it on? – Paul Oct 4 '11 at 22:57
Check the details of your exchange certificate with the following Exchange Console command Get-ExchangeCertificate | fl. Also check to make sure you have the most updated Service pack installed for Exchange. That sounds really familiar. – Nixphoe Oct 5 '11 at 3:58
@ Paul: I redirect to mailhop, from Dyn. – Dabblernl Oct 5 '11 at 6:05
Are all the intermediate certificates OK? One wasn't signed by DigiNotar by any chance was it? An update may have been installed somewhere, removing the trust for their CA and causing things to come to a grinding halt. – Ben Pilbrow Oct 5 '11 at 12:14
Is the time set correctly on the server? – devicenull Oct 6 '11 at 23:56
up vote 1 down vote accepted

While the Get-ExchangeCertificate | fl command still shows that the Essential SSL certificate is invalid, the sending of email has resumed without errors without my doing anything about it...

share|improve this answer

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.