Forum Discussion
Impact of Reduced DigiCert SSL Certificate Validity on Exchange Hybrid Environment
DigiCert is reducing certificate validity periods because of new industry requirements approved by the CA/Browser Forum. This is not a DigiCert-only decision all public Certificate Authorities must f...
Hi, good question. For Exchange hybrid, the shorter public certificate lifetime mostly changes your renewal planning, not the basic hybrid design.
The main things I would watch are:
1. The certificate bound to IIS on the Exchange hybrid server.
2. The certificate used by the Hybrid Configuration Wizard / send and receive connectors.
3. Any reverse proxy, load balancer, or application gateway certificate in front of Exchange.
4. Any monitoring that still assumes a one-year renewal cycle.
I would make renewal automation and alerting the priority here. If the certificate is replaced cleanly and the same names are covered, hybrid mail flow should not care that the public cert lifetime is shorter.