This browser is no longer supported.
Upgrade to Microsoft Edge to take advantage of the latest features, security updates, and technical support.
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(102.4, 20%, 19%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EJR%3C/text%3E%3C/svg%3E)
Hi
The pictures below started popping up on our PCs. and the PC was using not part of any domain. I tried to follow the link below but the IE was inaccessible. https://answers.microsoft.com/en-us/outlook_com/forum/all/outlookoffice365com-security-certificate-has-been/743bdb2b-06ce-4206-923e-bdb7041528bd
Using classic Outlook for Windows in business environments
I am not a computer person and also have this problem. I clicked into the Security Alert message's "View Certificate" button and saw that the certificate is issued to "outlook.com" while the security message said the internet address "outlook.office365.com" has security concern. That to me essentially is a Microsoft mess up by using Peter's credential to do business as Paul.
I think that I started to have this pop up issue around when the new certificate became effective, that was 7/25/2022.
As to some PCs/Macs don't have the issue maybe because they already have the correct security certificate installed on their computers. There is no setting in my hotmail setup for me to change in Outlook, so so far I am dealing with it by clicking ok on the box everyday.
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(92.8, 89%, 18%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EDD%3C/text%3E%3C/svg%3E)
I have seen this happen for various customers starting last week.
I have also had it happen on my IOS phone.
Odd that MS didnt publish the issue/solution yet. Its obviously fairly wide spread.
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(147.20000000000002, 25%, 24%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3ECR%3C/text%3E%3C/svg%3E)
Following Friday morning we have not had any further occurrences with any of our clients. No issue today either.
I don't think this can be classified as anything to do with Bitdefender as we dont' use that product anywhere in our own stack but were experiencing the same issue.
@B_Toronto your support experience sounds exhausting. Hope you brought your patience! So frustrating that you gotten taken down a rabbit hole with MX records etc. This is very clearly a certificate revocation issue related to an MS cert. If there was a name mismatch I could see going down the path of a configuration issue. I really have to wonder if there is a certificate somewhere in the certificate chain of trust that was revoked, even temporarily or that some UTM products didn't like during SSL inspection and flagged as not trusted. I'm not 100% ready to blame MS on this one as I think Digicert, some root certificate, or even UTM products performing SSL inspection could be the cause.
Glad it isn't an issue today for us, but I don't like unsolved mysteries.
Chris
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(240, 37%, 33%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3ECR%3C/text%3E%3C/svg%3E)
I own an IT company and several of my customers are reporting this to me across the board. Some running AD sync and some not. Not all of the mailboxes for each domain experience this, only some. This has been happening since yesterday. There is no way this is related to anything other than a Microsoft issue itself. Does Microsoft reply to this or see this stuff or I wonder how many people have reported this by now.
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(262.40000000000003, 38%, 35%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EB%3C/text%3E%3C/svg%3E)
I have opened a ticket with Microsoft on this, just curious are the client seeing this error utilizing BitDefender?
I suspect this is a Microsoft issue this time, but can always be related to IPS inspection of firewalls or IPS/Deep-SSL or web protection from Antivirus products.
However we have seen a spike in these issues (never encountered previously) in the past two days.
have you heard anything back from Microsoft yet? and btw, yes I'm using BitDefender and now i'm ALSO getting this message in my Outlook client now too. If I click on OK, messages start to download again... I went ahead and installed the certficate and going to see if it happens again but why hasn't Microsoft addressed this globally yet, this is obviously a very wide-spread problem. 
Still waiting to speak to a higher-level engineer and Microsoft.
Thus far support blamed us for not having DNS setup correctly, not recognizing that we operate a Hybrid environment and have done so for 6 years before these issues started cropping up.
Also had ridiculous claims that as an example our MX records which point to a secure mail gateway are contributing, when auto-discover has nothing to do with MX.
In any case, still waiting to have an escalated call. The reason I asked about BD is there is always the potential that the webprotection module which uses SSL deep inspection could have been interfering with the certificates.
I haven't had an opportunity yet on an occurrence, rather than approving the cert to disable web protection in BD temporarily and see if that resolve the issue.
This is the only outside possibility.
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(150.4, 53%, 24%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EMC%3C/text%3E%3C/svg%3E)
Same issue for many of our users using Outlook client and iOS so far. It is impacting both intranet and internet remote workers so is not Firewall specific.
Don't trust Microsoft to get certificates 100% right 100% of the time - by preventing 10% of users from connecting randomly they increase capacity by 10%!
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(281.6, 5%, 37%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EBN%3C/text%3E%3C/svg%3E)
We are also getting this alert now with PCs using Outlook Desktop on our local network.
