1、通过powershell查看证书的subjectname：
[PS] C:\Windows\system32>Get-ExchangeCertificate | fl
Acce***ules :
CertificateDomains : {contoso.com, bj-ex01.contoso.com, aps.contoso.com, bysdomino2exchange.com, autodiscover.
contoso.com, legacy.contoso.com}
HasPrivateKey : True
IsSelfSigned : False
Issuer : CN=contoso-BJ-DCB-CA, DC=contoso, DC=com
NotAfter : 7/17/2014 5:45:11 PM
NotBefore : 7/17/2012 5:45:11 PM
PublicKeySize : 2048
RootCAType : Enterprise
SerialNumber : 290A2A0000000000009C
Services : IMAP, POP, IIS, SMTP
Status : Valid
Subject : CN=contoso.com, OU=is, O=contoso, L=beijing, S=beijing, C=CN
Thumbprint : 9F0E693C22A4CCD67A1EB4255B25C284A7C4256E
2、get-outlookprovider
http://technet.microsoft.com/EN-US/library/cb46009b-ee6c-4c84-8534-4fb74c32d2eb(EXCHG.141).aspx
[PS] C:\Windows\system32>Get-OutlookProvider -identity expr
Name Server CertPrincipalName TTL
---- ------ ----------------- ---
EXPR msstd:contoso.com 1
[PS] C:\Windows\system32>Get-OutlookProvider -identity web
Name Server CertPrincipalName TTL
---- ------ ----------------- ---
WEB 1
[PS] C:\Windows\system32>Get-OutlookProvider -identity exch
Name Server CertPrincipalName TTL
---- ------ ----------------- ---
EXCH 1
3、set-outlookprovider
Set-OutlookProvider -Identity EXPR -CertPrincipalName msstd:*.contoso.com
4、手工在outlook2007/2010上配置MSSTD配置：
To change Outlook 2007/outlook2010 connection settings to resolve a certificate error
1. In Outlook 2007, on the Tools menu, click Account Settings.
2. Select your e-mail address listed under Name, and then click Change.
3. Click More Settings.
4. On the Connection tab, click Exchange Proxy Settings.
5. Select the Connect using SSL only check box.
6. Select the Only connect to proxy servers that have this principal name in their certificate: check box, and then, in the box that follows, enter msstd:*.contoso.com.
7. Click OK, and then click OK again.
8. Click Next.
9. Click Finish.
10. Click Close.
11. The new setting will take effect after you exit Outlook and open it again