Our ssl was going to expire, we are suppose to renew it but we decided to create a new one :
the old cert have these names :
common name: mail.abc.com
additional names : autodiscover.abc.com , serverA , serverA.abc.com, abc.com
It was working. After creating the new cert , it became like this :
common name : abc.com
additional names, autodiscover.abc.com, serverA, serverA.abc.com , mail.abc.com
the only different is we change the common name from mail.abc.com to abc.com . But mail.abc.com is included in additional names.
Upon applying the new cert, user is not able to use outlook, it keeps prompting for password. There is no certificate error.
and yet, user is able to access OWA.
Attached is the screenshot :