Overview of Hybrid Mail Flow
The Hybrid deployment between Exchange Server (on-premises) and Exchange Online provides secure mail routing between on-premises and Exchange Online organization with t...
Updated Jun 13, 2025
Version 3.0
Blog Post
As you may know, Google Chrome Root Program Policy will forbid soon public certificates including "Client Authentication" EKU. Some CA Browsers will stop to sell such certificates in a few months (15th of September 2025 for ssl.com, 1st of October 2025 for Digicert...).
Example: https://www.ssl.com/blogs/removal-of-the-client-authentication-eku-from-tls-server-certificates-what-you-need-to-know/
How Exchange hybrid mode will be affected by this change? As of today all of my customers use public Exchange certificate that have the following two EKUs: "client authentication" + "server authentication". I haven't see anything regarding the EKUs inside the official documentation.
@EHLO Team, can you please clarify this point?