When you use an S/MIME certificate that contains the value of 188.8.131.52.0 for the Any Purpose object identifier (also known as OID) in the Enhanced Key Usage (EKU) attribute, the certificate is considered invalid and is not included in the Offline Address Book (OAB). Therefore, the OAB is not generated as expected.
To work around this issue, use a certificate that contains the value of 184.108.40.206.220.127.116.11.4 for the Secure Email object identifier in the EKU attribute.
Microsoft has confirmed that this is a problem in the Microsoft products that are listed in the "Applies to" section.
Article ID: 2975988 - Last Review: Aug 26, 2014 - Revision: 1
Microsoft Exchange Server 2010 Service Pack 3, Microsoft Exchange Server 2010 Enterprise, Microsoft Exchange Server 2010 Standard