fetchmail: Server CommonName mismatch: mailserver != IP
fetchmail: Server certificate verification error: unable to get local issuer certificate
fetchmail: Server certificate verification error: certificate not trusted
fetchmail: Server certificate verification error: unable to verify the first certificate
fetchmail: Error exchanging credentials
The solution is put the fingerprint of the exchange2007 into your .fetchmailrc and use the following parameters:
sslproto ssl23
auth ntlm