Schannel Event ID 36888 and 36884 Certificate Error

schannelwindows-server-2008-r2

I'm receiving the two following errors every ~60 seconds on a Windows 2008R2 SP1 Server running SQL Server 2008R2:

First:

Log Name:      System
Source:        Schannel
Date:          5/25/2016 9:23:02 AM
Event ID:      36888
Task Category: None
Level:         Error
Keywords:      
User:          SYSTEM
Computer:      sql1.contoso.com
Description:
The following fatal alert was generated: 43. The internal error state is 552.

Second:

Log Name:      System
Source:        Schannel
Date:          5/25/2016 9:23:02 AM
Event ID:      36884
Task Category: None
Level:         Error
Keywords:      
User:          SYSTEM
Computer:      sql1.contoso.com
Description:
The certificate received from the remote server does not contain the expected name. 
It is therefore not possible to determine whether we are connecting to the correct server. 
The server name we were expecting is sql1. 
The SSL connection request has failed. The attached data contains the server certificate.

The server name in the second errors description is the same hostname as the FQDN in the Computer field.

Is the SSL Connection failure from sql1.contoso.com to another computer, from another computer to sql1.contoso.com, for from sql1.contoso.com to itself?

If there is another server involved, how can I determine which server is either the source or the target?

Any help on tracking down the source of the issue and a resolution is greatly appreciated.

Best Answer

Did you try this?

https://support.microsoft.com/en-us/kb/2275950

It says: "... that there's a known bug on Windows 2008 r2 that can make valid certificates to be rejected.". Seems to fit the description of what's happening to you, doesn't it?