What domains should I include in my UCC certificate?

May 25, 2018 in Windows and Certificate FAQ

Designed exclusively for Microsoft Exchange and Office Communications infrastructures, Sectigo Unified Communications Certificates allow a single certificate to provide SSL-secured communications for multiple domains and multiple host names operating on a single IP address.

What domains should I include in my UCC certificate ?

Currently, All CAs are issuing UCC certificates with fully qualified domain names (FQDN) only as per the CA/B Forum. Certificate requests with non-fully qualified names will be rejected.

NOTE: Due to recent CA/B Forum updates, SSL certificates for Internal Domain Names cannot be issued beyond October 31st, 2015. This means, a Certificate Authority cannot issue a certificate with an expiration date later than October 31st, 2015 with a Subject Alternative Name (SAN) extension or Subject Common Name (CN) field that contains a Reserved IP Address or Internal Server Name. For more info go here: https://cabforum.org/internal-names

This article details acceptable internal use IP's and names

For more information on the Office Communications Server 2007 Certificate Wizard and installing certificates for Office Communications Server, see the deployment documentation available on the Office Communications Server 2007 Technical Library

More about AutoDiscover from Microsoft's TechNet.

The Autodiscover service makes it easier to configure and manage Outlook 2007. Earlier versions of Microsoft Exchange and Outlook required that you configure all user profiles manually to access Exchange. Extra work was required to manage these profiles if changes occurred to the messaging environment. Otherwise, the Outlook clients could stop functioning correctly.

The Autodiscover service uses a user's e-mail address and domain account to automatically configure the user's profile. By using the e-mail address and domain account, the Autodiscover service can provide the following information to the client:

* The user’s display name
* Separate connection settings for internal and external connectivity
* The location of the user’s Mailbox server
* The URLs for various Outlook features that govern such functionality as Availability (free/busy) information, the Out of Office Assistant, Unified Messaging, and the Web-based offline address book
* Outlook Anywhere server settings

Related Articles
* Generating your Unified Communications Certificate (UCC) CSR

* UC Certificate SANs Exchange 2010