Forum Discussion

Off2w0rk's avatar
Off2w0rk
Brass Contributor
Dec 06, 2016

Outlook - Certificate has been revoked

Hi all,   not sure if anyone has experienced it, but we are getting tthis error multiple times a day when using outlook. It says :   Outlook.office365.com Information you Exchange with this sit...
2016
exchange online
office 365
Hap's avatar
Hap
Brass Contributor
May 23, 2017
Can you send me your support nr? I will create a premier support request today and can reference your ticket.
MichaeL3_6's avatar
MichaeL3_6
Copper Contributor
Jan 11, 2019

I keep getting the message outlook. Office365.Com has had its security certificate revoked. Is this true? What action should I take?

  • MichaeL3_6's avatar
    MichaeL3_6
    Copper Contributor
    Jan 11, 2019

    Just to add to my previous message I have now viewed the certificate and clicked on the tab titled Certification Path. This says: this certificate is okay.

    Does that mean there is actually no problem and this is just a glitch?

    • Sergg's avatar
      Sergg
      Iron Contributor
      Jul 16, 2021
      July 2021 - We got this across few personal and work computers few minutes ago. Various locations, same business.
      • AM-4566's avatar
        AM-4566
        Copper Contributor
        Sep 23, 2022
        September 2022 and it's still happening.

        Here's some relevant information from the certificate that Outlook reports revoked:
        ```
        SHA256 Fingerprint=D8:41:79:5B:EB:73:BB:7C:9E:78:A3:71:3E:3A:F6:E1:A5:06:E8:6A:00:B9:52:35:A0:E4:53:04:AC:C6:B6:9F
        SHA1 Fingerprint=F7:DA:87:B0:B5:8B:2A:2E:EC:38:6E:C7:A6:0A:B1:4D:5A:60:A4:99

        Certificate:
        Data:
        Version: 3 (0x2)
        Serial Number:
        0f:12:dc:89:55:82:1d:6d:93:6b:cf:34:e5:0f:60:c5
        Issuer: C = US, O = DigiCert Inc, CN = DigiCert Cloud Services CA-1
        Validity
        Not Before: Jul 26 00:00:00 2022 GMT
        Not After : Jul 25 23:59:59 2023 GMT
        Subject: C = US, ST = Washington, L = Redmond, O = Microsoft Corporation, CN = outlook.com
        X509v3 extensions:
        X509v3 Subject Alternative Name:
        DNS:*.clo.footprintdns.com, DNS:*.hotmail.com, DNS:*.internal.outlook.com, DNS:*.live.com, DNS:*.nrb.footprintdns.com, DNS:*.office.com, DNS:*.office365.com, DNS:*.outlook.com, DNS:*.outlook.office365.com, DNS:attachment.outlook.live.net, DNS:attachment.outlook.office.net, DNS:attachment.outlook.officeppe.net, DNS:attachments.office.net, DNS:attachments-sdf.office.net, DNS:ccs.login.microsoftonline.com, DNS:ccs-sdf.login.microsoftonline.com, DNS:hotmail.com, DNS:mail.services.live.com, DNS:office365.com, DNS:outlook.com, DNS:outlook.office.com, DNS:substrate.office.com, DNS:substrate-sdf.office.com
        ```
        Testing this certificate via https://certificate.revocationcheck.com/check shows that it is *not* revoked.

        I started experiencing this problem a couple of weeks ago and about once a couple of days Outlook pops up this warning.

        There is clearly a bug in one of `outlook.exe`'s components that it's misidentifying this certificate as revoked. One would hope that Microsoft would look into this, but given how long this has been going on, seems that there's a low chance of that happening.

Resources