Activesync Autoconfiguration Fails

We have created the CNAME for our domain autodiscover.tactelus.com to point to autodiscover.outlook.com but iOS, Android and Outlook Auto-configure fails. 

Using the online tool looks link this which would point to an issue on your end, but since there are really no good configuration articles for this I can't rule out we missed something. 

	Attempting the Autodiscover and Exchange ActiveSync test (if requested).
	Testing of Autodiscover for Exchange ActiveSync failed.
	Test Steps   Attempting each method of contacting the Autodiscover service.   The Autodiscover service couldn't be contacted successfully by any method.   Test Steps   Attempting to test potential Autodiscover URL https://tactelus.com/AutoDiscover/AutoDiscover.xml   Testing of this potential Autodiscover URL failed.   Test Steps   Attempting to resolve the host name tactelus.com in DNS.   The host name resolved successfully.   Additional Details   IP addresses returned: 216.250.117.24 Testing TCP port 443 on host tactelus.com to ensure it's listening and open.   The port was opened successfully. Testing the SSL certificate to make sure it's valid.   The SSL certificate failed one or more certificate validation checks.   Test Steps   ExRCA is attempting to obtain the SSL certificate from remote server tactelus.com on port 443.   ExRCA successfully obtained the remote SSL certificate.   Additional Details   Remote Certificate Subject: E=info@parallels.com, CN=Parallels Panel, OU=Parallels Panel, O=Parallels, L=Herndon, S=Virginia, C=US, Issuer: E=info@parallels.com, CN=Parallels Panel, OU=Parallels Panel, O=Parallels, L=Herndon, S=Virginia, C=US. Validating the certificate name.   Certificate name validation failed.    Tell me more about this issue and how to resolve it   Additional Details   Host name tactelus.com doesn't match any name found on the server certificate E=info@parallels.com, CN=Parallels Panel, OU=Parallels Panel, O=Parallels, L=Herndon, S=Virginia, C=US. Attempting to test potential Autodiscover URL https://autodiscover.tactelus.com/AutoDiscover/AutoDiscover.xml   Testing of this potential Autodiscover URL failed.   Test Steps   Attempting to resolve the host name autodiscover.tactelus.com in DNS.   The host name resolved successfully.   Additional Details   IP addresses returned: 157.56.240.137, 157.56.244.217, 157.56.234.137, 157.56.236.89 Testing TCP port 443 on host autodiscover.tactelus.com to ensure it's listening and open.   The specified port is either blocked, not listening, or not producing the expected response.    Tell me more about this issue and how to resolve it   Additional Details   A network error occurred while communicating with the remote host. Attempting to contact the Autodiscover service using the HTTP redirect method.   The attempt to contact Autodiscover using the HTTP Redirect method failed.   Test Steps   Attempting to resolve the host name autodiscover.tactelus.com in DNS.   The host name resolved successfully.   Additional Details   IP addresses returned: 157.56.244.217, 157.56.234.137, 157.56.236.89, 157.56.240.137 Testing TCP port 80 on host autodiscover.tactelus.com to ensure it's listening and open.   The port was opened successfully. ExRCA is checking the host autodiscover.tactelus.com for an HTTP redirect to the Autodiscover service.   The redirect (HTTP 301/302) response was received successfully.   Additional Details   Redirect URL: https://autodiscover-s.outlook.com/Autodiscover/Autodiscover.xml Attempting to test potential Autodiscover URL https://autodiscover-s.outlook.com/Autodiscover/Autodiscover.xml   Testing of this potential Autodiscover URL failed.   Test Steps   Attempting to resolve the host name autodiscover-s.outlook.com in DNS.   The host name resolved successfully.   Additional Details   IP addresses returned: 157.56.245.6, 157.56.245.70, 157.56.232.166, 157.56.234.134, 157.56.236.230, 157.56.232.22, 157.56.236.6, 157.56.241.102, 157.56.245.166 Testing TCP port 443 on host autodiscover-s.outlook.com to ensure it's listening and open.   The port was opened successfully. Testing the SSL certificate to make sure it's valid.   The certificate passed all validation requirements.   Test Steps   ExRCA is attempting to obtain the SSL certificate from remote server autodiscover-s.outlook.com on port 443.   ExRCA successfully obtained the remote SSL certificate.   Additional Details   Remote Certificate Subject: CN=outlook.com, OU=Exchange, O=Microsoft Corporation, L=Redmond, S=Washington, C=US, Issuer: CN=Microsoft Secure Server Authority, DC=redmond, DC=corp, DC=microsoft, DC=com. Validating the certificate name.   The certificate name was validated successfully.   Additional Details   Host name autodiscover-s.outlook.com was found in the Certificate Subject Alternative Name entry. Testing the certificate date to confirm the certificate is valid.   Date validation passed. The certificate hasn't expired.   Additional Details   The certificate is valid. NotBefore = 4/17/2012 9:26:21 PM, NotAfter = 4/17/2014 9:26:21 PM Checking the IIS configuration for client certificate authentication.   Client certificate authentication wasn't detected.   Additional Details   Accept/Require Client Certificates isn't configured. Attempting to send an Autodiscover POST request to potential Autodiscover URLs.   Autodiscover settings weren't obtained when the Autodiscover POST request was sent.   Test Steps   ExRCA is attempting to retrieve an XML Autodiscover response from URL https://autodiscover-s.outlook.com/Autodiscover/Autodiscover.xml for user it-support@tactelus.com.   ExRCA failed to obtain an Autodiscover XML response.   Additional Details   An HTTP 401 Unauthorized response was received from the remote Unknown server. This is usually the result of an incorrect username or password. If you are attempting to log onto an Office 365 service, ensure you are using your full User Principal Name (UPN).