A
Exchange 2013 SP1 or later first checks for the SST file and validates the certificate. If the validation fails, it will look at the local machine certificate store to validate the certificate. This behavior is different from previous versions of Exchange. https://docs.microsoft.com/en-us/exchange/set-up-virtual-certificate-collection-to-validate-s-mime
Вот я так и сделал с рутовым сертификатом, но:
