This browser is no longer supported.
Upgrade to Microsoft Edge to take advantage of the latest features, security updates, and technical support.
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(156.8, 50%, 25%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3ERA%3C/text%3E%3C/svg%3E)
Hi,
Greetings.
Our Exchange UCC cert (Multiple alternative names are included in the cert) is going to be expired in 15 days but I have renewed & installed the new cert on server & also assigned services like IIS,POP,IMAP & SMTP to it.
But that old certificate is still valid & I can see IIS,POP,IMAP & SMTP services also still checked in that certificate & can't deselect those services from that certificate.
I checked by accessing ECP console & found the new SSL certificate over there (In address bar) but in SMTP receive logs I can still see the OLD cert is in used.
How can I fix this? what will happen when my OLD cert is expired in this scenario?
Thanks in advance.
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(281.6, 84%, 37%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EJL%3C/text%3E%3C/svg%3E)
Hi @raj a ,
I am writing to see how everything is going on with this thread. I noticed that you have fixed the issue via set the new TLS certificate, it's recommended to click "accept answer" under your post. If you still need further assistance, please feel free to post back.
Thanks for your understanding.
It has been fixed, I needed to set the new TLS certificate to Send & Receive Connectors where the old certificate was attached.
Hi @raj a ,
Glad to see your issue has been resolved and thanks for your sharing, in this case, it's recommended to click "Accept Answer" under your post, which would benefit others who also have similar issues find relevant information more easier. Thanks for your understanding.
Hi @raj a ,
but I have renewed & installed the new cert on server & also assigned services like IIS,POP,IMAP & SMTP to it
How did you renew and install your certificate? By those steps as the official document mentioned or others? We recommend you follow the steps above to renew your certificate.
found the new SSL certificate over there (In address bar)
Do you mean you could find the new certificate in your certificate list? If so, what's the status of your new certificate? Please ensure that your certificate is valid after you complete the renewal.
In order to further ensure the services were assigned normally, we could try to re-assign them via EAC or Exchange management shell as the document mentioned to check if the issue has any difference after that.
If the response is helpful, please click "Accept Answer" and upvote it.
Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.