Invalid or expired e-mail certificates. These certificates will not be included in the offline address list

Issue: On OAB Generator Server, there is the following event ID logged:

Log Name: Application
Source: MSExchangeSA
Date: 5/11/2009 3:09:32 PM
Event ID: 9323
Task Category: OAL Generator
Level: Warning
Keywords: Classic
User: N/A
Computer: OABSRV
Description:
Entry 'Moscowitz, adam' has invalid or expired e-mail certificates. These certificates will not be included in the offline address list for '\Global Address List'.
- Default Offline Address List

Solution:

1. Open ADCU with advanced View enable, find the user name in the event log. Click Published Certificates Tab, remove the expired certificate.
2. from ESM, right click Default Offline Address List, choose Rebuild...

Note: If you run Exchange 2007, you can use EMS to rebuild the offline Address List:

How to rebuild an Offline Address List through the Microsoft Exchange Scripting Console

Type Update-OfflineAddressBook –Identity “Default Offline Address List”NOTE: This will generate the Default Offline Address List. Again by default you will not see any output if the Offline Address List has been generates successfully.OPTIONAL COMMNAD:

You can also run Update-OfflineAddressBook –Identity “Default Offline Address List” -vb to output the information in verbose mode.(verbose output)

VERBOSE: Beginning the task's processing.VERBOSE: Processing one object in the task.VERBOSE: Searching configurable objects "Default Offline Address List" of type "OfflineAddressBook" under the root "$null" on Source "DC1.fourthcoffee.com".VERBOSE: Validating the configurable object "\Default Offline Address List".VERBOSE: Searching configurable objects "E12-MBX" of type "Server" under the root "$null" on Source "DC1.fourthcoffee.com".VERBOSE: Ending the task's processing.