Difference between Self singed Certificate and Public certificate

 The CA has a key that can be used to sign a lower level certificate and a root certificate that can
be embedded in the accepted root certificates on the client and is used to verify the lower
certificates to check they are valid. Self-signed just means you are your own CA. Whenever
creating a self-signed certificate you create a CA, then sign a site cert with that CA I.e. you sign it
yourself. There is nothing stopping you from calling your site www.Brandix.com and have a cert
to match. Only

 An external CA, like VeriSign and Digicert will check that you are
indeed Brandix, before issuing a cert to you

Best Practices for Domain Names for Internet SMTP

When you create a certificate or a certificate request for an Edge Transport server performing SMTP TLS
over the Internet, the set of domain names that you should include in the request are as follows:

 The fully qualified Internet domain name of the server   This may be different from the internal
FQDN that is used between Edge Transport servers and Hub Transport servers and should match
the A record that is published on the Internet (public) DNS server. This name should be entered
as a CN in theSubjectName parameter of the New-ExchangeCertificate cmdlet.
 All the accepted domain names of the organization   Use
the IncludeAcceptedDomains parameter of the New-ExchangeCertificate cmdlet to populate the
Subject Alternative Name for the resulting certificate.
 The FQDN for the connector if it isn't covered by either of the previous items   Use
theDomainName parameter of the New-ExchangeCertificate cmdlet to populate the Subject
Alternative Name for the resulting certificate.

Wildcard Character Domain Names

Wildcard character domain names are a special type of domain name that represents multiple sub-
domains. Wildcard character domain names can simplify certificates because a single wildcard domain
name represents all the sub-domains for that domain. They are represented by an asterisk character ( *)
at the DNS node. For example, *.contoso.com represents contoso.com and all the sub-domains
for contoso.com. When you use a wildcard character to create a certificate or a certificate request for all
accepted domains, you can simplify the request significantly.