Thank you for your reply. EMS has been initiated by admin, and the self-signed certificate is currently expired. However, on another machine that has not installed the KB5063223 patch, the certificate can be queried through command.
So do you suggest updating the auth certificate?
You should definitely get the auth cert renewed ASAP, it's not hard to do.
Otherwise you'll get odd symptoms like OWA/EAC not working properly, hybrid issues etc.
Quite possible the update has introduced a glitch or that it's purposely not showing expired certs for some reason.
EAC would show the cert as Invalid if it is expired or CRL can't be verified, can't remember what the command line shows by default.
I get same result when i query from a remote exchange management shell not on a server.
