-

🔐 Exchange STARTTLS certificate selection: how a new certificate can break SMTP before it is even enabled
During a routine certificate renewal, Exchange may unexpectedly select the new certificate for STARTTLS – even if it hasn’t been assigned to the SMTP service yet. This article explains why it happens and how to avoid TLS negotiation failed with error InvalidHandle.
