security certificate revoked - outlook.office365.com

John Rovel Kalaw 6

The pictures below started popping up on our PCs. and the PC was using not part of any domain. I tried to follow the link below but the IE was inaccessible. https://answers.microsoft.com/en-us/outlook_com/forum/all/outlookoffice365com-security-certificate-has-been/743bdb2b-06ce-4206-923e-bdb7041528bd

Drifter 1 Reputation point

2022-10-08T18:50:23.963+00:00

I am not a computer person and also have this problem. I clicked into the Security Alert message's "View Certificate" button and saw that the certificate is issued to "outlook.com" while the security message said the internet address "outlook.office365.com" has security concern. That to me essentially is a Microsoft mess up by using Peter's credential to do business as Paul.

I think that I started to have this pop up issue around when the new certificate became effective, that was 7/25/2022.

As to some PCs/Macs don't have the issue maybe because they already have the correct security certificate installed on their computers. There is no setting in my hotmail setup for me to change in Outlook, so so far I am dealing with it by clicking ok on the box everyday.

49 answers

91Gsixty 1 Reputation point

2022-11-02T14:26:26.59+00:00

More info
ON, Canada

Thumbprint = f7da87b0b58b2a2eec386ec7a60ab14d5a60a499
Serial = 0f12dc8955821d6d936bcf34e50f60c5

CRL & OCSP report
https://certificate.revocationcheck.com/d841795beb73bb7c9e78a3713e3af6e1a506e86a00b95235a0e45304acc6b69f/outlook.com

Correct me if I'm wrong but the report states that it is not revoked.
CRL information does say "Revocation information is updated at least once every twelve months "

CERTUIL OUTPUT

C:\temp>certutil -verify -urlfetch testoulook.crt.cer

Issuer:
CN=DigiCert Cloud Services CA-1
O=DigiCert Inc
C=US
Name Hash(sha1): 48b6a9e21293b3c020b12ace4e73649a3c67dc9b
Name Hash(md5): 15b99a482264ff73f2a208ddbefd9e98
Subject:
CN=outlook.com
O=Microsoft Corporation
L=Redmond
S=Washington
C=US
Name Hash(sha1): 830674a4478dcff5ece46d1b71e1ebe193d47d67
Name Hash(md5): f32ab5d9094e4f0bed302ed125cc82cd
Cert Serial Number: 0f12dc8955821d6d936bcf34e50f60c5

dwFlags = CA_VERIFY_FLAGS_CONSOLE_TRACE (0x20000000)
dwFlags = CA_VERIFY_FLAGS_DUMP_CHAIN (0x40000000)
ChainFlags = CERT_CHAIN_REVOCATION_CHECK_CHAIN_EXCLUDE_ROOT (0x40000000)
HCCE_LOCAL_MACHINE
CERT_CHAIN_POLICY_BASE

--------
CERT_CHAIN_CONTEXT --------
ChainContext.dwInfoStatus = CERT_TRUST_HAS_PREFERRED_ISSUER (0x100)
ChainContext.dwRevocationFreshnessTime: 19 Hours, 8 Minutes, 53 Seconds

SimpleChain.dwInfoStatus = CERT_TRUST_HAS_PREFERRED_ISSUER (0x100)
SimpleChain.dwRevocationFreshnessTime: 19 Hours, 8 Minutes, 53 Seconds

CertContext[0][0]: dwInfoStatus=102 dwErrorStatus=0
Issuer: CN=DigiCert Cloud Services CA-1, O=DigiCert Inc, C=US
NotBefore: 7/25/2022 8:00 PM
NotAfter: 7/25/2023 7:59 PM
Subject: CN=outlook.com, O=Microsoft Corporation, L=Redmond, S=Washington, C=US
Serial: 0f12dc8955821d6d936bcf34e50f60c5
SubjectAltName: DNS Name=.clo.footprintdns.com, DNS Name=.hotmail.com, DNS Name=.internal.outlook.com, DNS Name=.live.com, DNS Name=.nrb.footprintdns.com, DNS Name=.office.com, DNS Name=.office365.com, DNS Name=.outlook.com, DNS Name=*.outlook.office365.com, DNS Name=attachment.outlook.live.net, DNS Name=attachment.outlook.office.net, DNS Name=attachment.outlook.officeppe.net, DNS Name=attachments.office.net, DNS Name=attachments-sdf.office.net, DNS Name=ccs.login.microsoftonline.com, DNS Name=ccs-sdf.login.microsoftonline.com, DNS Name=hotmail.com, DNS Name=mail.services.live.com, DNS Name=office365.com, DNS Name=outlook.com, DNS Name=outlook.office.com, DNS Name=substrate.office.com, DNS Name=substrate-sdf.office.com
Cert: f7da87b0b58b2a2eec386ec7a60ab14d5a60a499
Element.dwInfoStatus = CERT_TRUST_HAS_KEY_MATCH_ISSUER (0x2)
Element.dwInfoStatus = CERT_TRUST_HAS_PREFERRED_ISSUER (0x100)
---------------- Certificate AIA ----------------
Verified "Certificate (0)" Time: 0 81b68d6cd2f221f8f534e677523bb236bba1dc56
[0.0] http://cacerts.digicert.com/DigiCertCloudServicesCA-1.crt

---------------- Certificate CDP ----------------
Verified "Base CRL (0a52)" Time: 0 a0f47f61e4f0b841cf49dffb063c3dc82325119d
[0.0] http://crl3.digicert.com/DigiCertCloudServicesCA-1-g1.crl

Verified "Base CRL (0a52)" Time: 0 a0f47f61e4f0b841cf49dffb063c3dc82325119d
[1.0] http://crl4.digicert.com/DigiCertCloudServicesCA-1-g1.crl

---------------- Base CRL CDP ----------------
No URLs "None" Time: 0 (null)
---------------- Certificate OCSP ----------------
Verified "OCSP" Time: 0 266ca90d4cf7f2c17376696ecdd431ba9794d485
[0.0] http://ocspx.digicert.com

--------------------------------
CRL (null):
Issuer: CN=DigiCert Cloud Services CA-1, O=DigiCert Inc, C=US
ThisUpdate: 11/2/2022 12:15 AM
NextUpdate: 11/8/2022 11:30 PM
CRL: 8913134d940671fe8638e88bd349fd55f791724c
Issuance[0] = 2.23.140.1.2.2
Application[0] = 1.3.6.1.5.5.7.3.2 Client Authentication
Application[1] = 1.3.6.1.5.5.7.3.1 Server Authentication

CertContext[0][1]: dwInfoStatus=102 dwErrorStatus=0
Issuer: CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US
NotBefore: 8/4/2015 8:00 AM
NotAfter: 8/4/2030 8:00 AM
Subject: CN=DigiCert Cloud Services CA-1, O=DigiCert Inc, C=US
Serial: 019ec1c6bd3f597bb20c3338e551d877
Cert: 81b68d6cd2f221f8f534e677523bb236bba1dc56
Element.dwInfoStatus = CERT_TRUST_HAS_KEY_MATCH_ISSUER (0x2)
Element.dwInfoStatus = CERT_TRUST_HAS_PREFERRED_ISSUER (0x100)
---------------- Certificate AIA ----------------
No URLs "None" Time: 0 (null)
---------------- Certificate CDP ----------------
Verified "Base CRL (0288)" Time: 0 b57e588e3371a7fee13eaa737aefdf4e126dcf51
[0.0] http://crl4.digicert.com/DigiCertGlobalRootCA.crl

Verified "Base CRL (0288)" Time: 0 b57e588e3371a7fee13eaa737aefdf4e126dcf51
[1.0] http://crl3.digicert.com/DigiCertGlobalRootCA.crl

---------------- Base CRL CDP ----------------
No URLs "None" Time: 0 (null)
---------------- Certificate OCSP ----------------
Verified "OCSP" Time: 0 80d02a82ed91c45c253ac7f02d0e860f7dad676e
[0.0] http://ocsp.digicert.com

--------------------------------
CRL (null):
Issuer: CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US
ThisUpdate: 11/1/2022 3:10 PM
NextUpdate: 11/8/2022 3:10 PM
CRL: 29770badf567892431ebfbc24697ed9b9317281c
Application[0] = 1.3.6.1.5.5.7.3.2 Client Authentication
Application[1] = 1.3.6.1.5.5.7.3.3 Code Signing
Application[2] = 1.3.6.1.5.5.7.3.4 Secure Email
Application[3] = 1.3.6.1.5.5.7.3.1 Server Authentication
Application[4] = 1.3.6.1.5.5.7.3.8 Time Stamping

CertContext[0][2]: dwInfoStatus=10a dwErrorStatus=0
Issuer: CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US
NotBefore: 11/9/2006 8:00 PM
NotAfter: 11/9/2031 8:00 PM
Subject: CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US
Serial: 083be056904246b1a1756ac95991c74a
Cert: a8985d3a65e5e5c4b2d7d66d40c6dd2fb19c5436
Element.dwInfoStatus = CERT_TRUST_HAS_KEY_MATCH_ISSUER (0x2)
Element.dwInfoStatus = CERT_TRUST_IS_SELF_SIGNED (0x8)
Element.dwInfoStatus = CERT_TRUST_HAS_PREFERRED_ISSUER (0x100)
---------------- Certificate AIA ----------------
No URLs "None" Time: 0 (null)
---------------- Certificate CDP ----------------
No URLs "None" Time: 0 (null)
---------------- Certificate OCSP ----------------
No URLs "None" Time: 0 (null)
--------------------------------
Application[0] = 1.3.6.1.5.5.7.3.2 Client Authentication
Application[1] = 1.3.6.1.5.5.7.3.3 Code Signing
Application[2] = 1.3.6.1.5.5.7.3.4 Secure Email
Application[3] = 1.3.6.1.5.5.7.3.1 Server Authentication
Application[4] = 1.3.6.1.5.5.7.3.8 Time Stamping
EV[0] = 2.16.840.1.114412.2.1
EV[1] = 2.23.140.1.3

Exclude leaf cert:
Chain: a8f25e97a4ef94994351f1a0b09068320cd7f732
Full chain:
Chain: 72d2e243f0cc9ff042e9d321fd51a4fdb6c2d364

------------------------------------

Verified Issuance Policies:
2.23.140.1.2.2
Verified Application Policies:
1.3.6.1.5.5.7.3.2 Client Authentication
1.3.6.1.5.5.7.3.1 Server Authentication
Cert is an End Entity certificate
Leaf certificate revocation check passed

CertUtil: -verify command completed successfully.

So its is not revoked, but outlook is stating otherwise.
Was this answer helpful?

0 comments No comments
Sign in to comment

Use comments to ask for clarification, additional information, or improvements to the question.
Alexander, Edwin 21 Reputation points

2022-11-02T14:02:39.87+00:00

This is also hitting two completely separate tenants in Canada east coast which we manage. Random users, at work, at home, vpn connected, direct ISP connected, desktop,laptop, mobile, Windows, Mac, does not make a difference. So this certainly looks like a Microsoft side issue. At first it was very sporadically reported but now several users are reporting it since it has increased in frequency this past week.
Was this answer helpful?

0 comments No comments
Sign in to comment

Use comments to ask for clarification, additional information, or improvements to the question.
Darius Ianosev 1 Reputation point

2022-11-02T13:53:36.263+00:00

Anyone got any official notification from Microsoft that this is being looked at? It's way to random for way to many users to be a local issue or something that we need to user workarounds to fix.
Was this answer helpful?

0 comments No comments
Sign in to comment

Use comments to ask for clarification, additional information, or improvements to the question.
CO 11 Reputation points

2022-11-01T19:19:19.533+00:00

We've seen this intermittently in Ontario.

Certificate Serial number is 0f12dc8955821d6d936bcf34e50f60c5
Was this answer helpful?

2 people found this answer helpful.
Cameron R 6 Reputation points

2022-11-01T19:52:45.477+00:00

the certificate I ended up installing on my computer so it would quit popping up is also 0f12dc8955821d6d936bcf34e50f60c5

it shows up here when you install it automatically:

Daniel 1 Reputation point

2022-11-01T20:09:59.57+00:00

This is to CameronR-3757: Hello Cameron, I see that you installed the certificate that resolved this issue. I am an end user of Microsoft 365 on a Windows 10 computer. How do I go about (or where can I find the instructions) for installing this certificate on my computer? Thanks. Dan

Rod MacPherson 16 Reputation points

2022-11-01T20:18:40.56+00:00

@Cameron R How long ago did you install the certificate like that?
The issue is very intermittent for us, so I would like to see that it has been running error free for a suitable length of time before messing around with locally installed certificates.
While there are tools like GPO to make this easier, and it makes sense that that would stop the warning,

I prefer not to have to do that at all, and especially if I'm not entirely sure it will solve the issue.
I would rather see MS address this on their end.

Cameron R 6 Reputation points

2022-11-02T03:58:50.673+00:00

Click on view certificate when you get the prompt....there will be an option to install the certificate on the next screen. Just accept the defaults and go thru the prompts until it says certificate installed... then you should be done.

If you want to verify that it did install properly do the following:

Hold down windows key + r and type in MMC
Go to file-->add/remove snap-in and choose certificates, then choose my user account.
Scroll down to "Other people" and expand as you can see in my screenshot... you should see the outlook.com certificate on the right

Jacob Cavaness 11 Reputation points

2022-11-02T13:54:40.433+00:00

We have 4 different machines that keeps having the popup certificate issue. I added the certificate to machine1 and machine2. Machine3 was never changed or messed with. Even after installing the certificate it still gave the popup the next day on one machine1 but did not on machine2. Then on machine3 it just randomly stopped having the popup, I checked and there were no updates or changes applied in the last 2 days. The user of machine4 reported this morning that they did not have the popup just yet, and no changes to fix it have been applied. Very inconsistent!

Will try to reach out to Microsoft today.
Sign in to comment

Use comments to ask for clarification, additional information, or improvements to the question.
Cameron R 6 Reputation points

2022-11-01T18:58:42.78+00:00

I have several clients spread across Kentucky in the US experiencing this issue. (I replied to this thread yesterday as well)
Of course I haven't seen it again myself because I went ahead and just installed that certificate that said it was revoked because it was driving me crazy.
Was this answer helpful?

0 comments No comments
Sign in to comment

Use comments to ask for clarification, additional information, or improvements to the question.

security certificate revoked - outlook.office365.com

49 answers

Your answer