I have two mail servers, one Exchange 2003, one Exchange 2010 (for the same domains; we are in transition). The two servers have a common SSL certificate (with the Server Alternate Name extension).

Requiring SSL on the /exchange VD breaks OMA and ActiveSync. MS used to have two KB articles with workarounds. It involved creating a second /exchange VD, leaving SSL turned off for that VD, and ...