The CAS server is using a self-signed certificate for IIS. Email clients won't automatically trust it. It isn't recommended ...