There are two possible causes:
1. You are using a self-signed certificate that has not been placed in the Trusted Root Certification Authorities Store
2. You are connecting to the Exchange server using server name or IP address that is not specified in the certificate.