Go to Services, and look at the "Log On As" column for these 3 services:
Microsoft Exchange IMAP4
Microsoft Exchange POP3
Microsoft Exchange Transport
By default, they will all use "Network Service".
Then run mmc.exe elevated and add the Certificates snap-in for the local computer. Right-click the relevant certificate (e.g. mail.example....