SSL and Common Name?

[Phillip]

I want to get an SSL certificate from Verisign but I have a question about
the common name.

I have AD 2003 and Exchange 2003 behind a pix firewall. Right now when
people want to check their email via OWA they enter in a public IP address
which takes them to our fix and is nated to the Exchange server.

I'm confused about what to put for the common name when requesting the
certificate. Do I put the FQDN for the server the email server is on or do I
put the address of the mail server as entered from an external IE client, ie
mail.mydomain.com?

[Tim Hackbart [MSFT]]

You will want to use the External Name that your IE clients will be tying
into the browser.

This is critical if you want to deploy RPC over HTTP in the future.

--
Tim Hackbart M.C.S.E.
This posting is provided "AS IS" with no warranties, and confers no rights.

Please do not send email directly to this alias. This alias is for newsgroup
purposes only.

"Phillip" <Phillip@discussions.microsoft.com> wrote in message
news:66A6C789-045F-4D36-9461-FAB95C9C548C@microsoft.com...

I want to get an SSL certificate from Verisign but I have a question about
the common name.

I have AD 2003 and Exchange 2003 behind a pix firewall. Right now when
people want to check their email via OWA they enter in a public IP address
which takes them to our fix and is nated to the Exchange server.

I'm confused about what to put for the common name when requesting the
certificate. Do I put the FQDN for the server the email server is on or
do I
put the address of the mail server as entered from an external IE client,
ie
mail.mydomain.com?