none
Event Vewier Error 12014,not find a certificate that contains the domain name

    Question

  • hi everyone;

    the below error keeps coming,and i don't know why 

    Microsoft Exchange could not find a certificate that contains the domain name ASFEX2.ASFDC.COM in the personal store on the local computer. Therefore, it is unable to support the STARTTLS SMTP verb for the connector Default ASFEX2 with a FQDN parameter of ASFEX2.ASFDC.COM. If the connector's FQDN is not specified, the computer's FQDN is used. Verify the connector configuration and the installed certificates to make sure that there is a certificate with a domain name for that FQDN. If this certificate exists, run Enable-ExchangeCertificate -Services SMTP to make sure that the Microsoft Exchange Transport service has access to the certificate key.

    i have 2 Exchange server , Ex1 for mailbox and EX2 all roles with mailbox, and i have CER from GoDady  with services.

    ****

    i nottec this error under System :

    An TLS 1.2 connection request was received from a remote client application, but none of the cipher suites supported by the client application are supported by the server. The SSL connection request has failed.

    thank you


    Osma Othman


    • Edited by Osama123 Tuesday, January 10, 2017 9:44 AM
    Tuesday, January 10, 2017 9:32 AM

All replies

  • Hi Osma,

    Please troubleshoot the error 12014 as this article guides below:

    How to Troubleshoot STARTTLS Certificate Error 12014

    https://technet.microsoft.com/en-us/library/bb510128(v=exchg.80).aspx

    More specifically, examine the configuration of the certificates that are installed on the Exchange server and the configuration of all Receive connectors and Send connectors that are installed on the server.

    Best Regards,

    Amy


    Please remember to mark the replies as answers if they help.
    If you have feedback for TechNet Subscriber Support, contact tnmff@microsoft.com.

    Wednesday, January 11, 2017 10:13 AM
    Moderator
  • Hi Osma,

    Would you please provide us with an update on the status of your issue?

    Best Regards,

    Amy


    Please remember to mark the replies as answers if they help.
    If you have feedback for TechNet Subscriber Support, contact tnmff@microsoft.com.

    Monday, January 23, 2017 3:14 PM
    Moderator
  • what i found , server name in send connector is ASFEX2.ASFDC.COM

    but the cer domain name is mail.mysaite.combut email works fine

    i tried to change it but its saying you can't change the name


    Osma Othman

    Monday, January 23, 2017 4:57 PM
  • what i found , server name in send connector is ASFEX2.ASFDC.COM

    but the cer domain name is mail.mysaite.combut email works fine

    i tried to change it but its saying you can't change the name

    Hi Osma,

    We cannot change subject name directly on a certificate, instead we need to enroll for a new certificate with correct subject name.

    If Enterprise PKI is deployed, certificates can be enrolled via MMC on domain-joined clients, or via Web Enrollment on non-domain-joined clients.

    Request a Certificate

    https://technet.microsoft.com/en-us/library/cc730689(v=ws.11).aspx

    In addition, it's recommended to purchase certificate from public CAs, as certificates issued by public CAs are trusted by default.

    Best Regards,

    Amy


    Please remember to mark the replies as answers if they help.
    If you have feedback for TechNet Subscriber Support, contact tnmff@microsoft.com.

    Tuesday, January 24, 2017 8:11 AM
    Moderator
  • this cer i had purchased from Goddady i think ,not a free one

    do i need to contact with them ?


    Osma Othman

    Tuesday, January 24, 2017 10:07 AM
  • this cer i had purchased from Goddady i think ,not a free one

    do i need to contact with them ?

    Hi Osma,

    Yes if you'd like to request for a certificate which has a matching subject name with domain name.

    Best Regards,

    Amy


    Please remember to mark the replies as answers if they help.
    If you have feedback for TechNet Subscriber Support, contact tnmff@microsoft.com.

    Thursday, January 26, 2017 6:24 AM
    Moderator