When you install an Exchange server with the hub or edge transport role, a default certificate is created. Because Exchange generates this certificate instead of a real certification authority, the certificate is considered to be self-signed. The default certificate will become a direct trust message.