If this is for connection to your own Exchange server, then you'll need your own CA server, and to generate your own certificates for your users. I haven't done it with Azure, but here are Azure instructions. https://docs.microsoft.com/en-us/azure/active-directory/authentication/active-directory-certificate-based-authentication-get-started
... View more