Certificate Error

%3CLINGO-SUB%20id%3D%22lingo-sub-50561%22%20slang%3D%22en-US%22%3ECertificate%20Error%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-50561%22%20slang%3D%22en-US%22%3E%3CP%3ECouple%20of%20my%20users%20are%20receiving%20this%20error%20for%20outlook.office365.com%20in%20Outlook%202010.%3C%2FP%3E%3CP%3EAny%20ideas%3F%3C%2FP%3E%3CP%3E%3CSPAN%20class%3D%22lia-inline-image-display-wrapper%20lia-image-align-inline%22%20image-alt%3D%22Error%22%20style%3D%22width%3A%20391px%3B%22%3E%3CIMG%20src%3D%22https%3A%2F%2Fgxcuf89792.i.lithium.com%2Ft5%2Fimage%2Fserverpage%2Fimage-id%2F11519i3CE3F160F84E58A8%2Fimage-size%2Flarge%3Fv%3D1.0%26amp%3Bpx%3D999%22%20title%3D%22Outlook%20Certificate.png%22%20alt%3D%22Error%22%20%2F%3E%3CSPAN%20class%3D%22lia-inline-image-caption%22%20onclick%3D%22event.preventDefault()%3B%22%3EError%3C%2FSPAN%3E%3C%2FSPAN%3E%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-LABS%20id%3D%22lingo-labs-50561%22%20slang%3D%22en-US%22%3E%3CLINGO-LABEL%3E2010%3C%2FLINGO-LABEL%3E%3CLINGO-LABEL%3EExchange%20Online%3C%2FLINGO-LABEL%3E%3CLINGO-LABEL%3EOutlook%3C%2FLINGO-LABEL%3E%3C%2FLINGO-LABS%3E%3CLINGO-SUB%20id%3D%22lingo-sub-59834%22%20slang%3D%22en-US%22%3ERe%3A%20Certificate%20Error%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-59834%22%20slang%3D%22en-US%22%3EHI%20cary%EF%BC%81%3CBR%20%2F%3ETrouble%20to%20confirm%20whether%20all%20users%20have%20this%20problem%E3%80%82%3CBR%20%2F%3EIf%20it%20is%20a%20few%20users%2C%20reconfigure%20Outlook%20is%20resolved!%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-59689%22%20slang%3D%22en-US%22%3ERe%3A%20Certificate%20Error%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-59689%22%20slang%3D%22en-US%22%3E%3CP%3EWe%20have%20a%20couple%20of%20clients%20with%20this%20error.%26nbsp%3B%20They%20have%20two%20different%20Internet%20Service%20PRoviders%2C%20one%20active%20and%20one%20of%20backup.%20Booth%20customers%20had%20the%20same%20ISP%20active%2C%20we%20change%20to%20the%20backup%20ISP%20for%20all%20out%20connections.%3C%2FP%3E%3CP%3EWe%20check%20DNS%2C%20SPN%2C%20outlook%C2%B4s%20updates%2C%20etc..%3C%2FP%3E%3CP%3EThe%20issue%20was%20fixed%20changing%20the%20ISP%20.%3C%2FP%3E%3CP%3EGreats%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-59161%22%20slang%3D%22en-US%22%3ERe%3A%20Certificate%20Error%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-59161%22%20slang%3D%22en-US%22%3E%3CP%3ELooks%20like%20a%20proxy%20certificate%20issue.%20Especially%2C%20if%20users%20connect%20to%20internal%20source%20(e.g.%20SharePoint)%20and%20Office%20365%20using%20Outlook.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-57913%22%20slang%3D%22en-US%22%3ERe%3A%20Certificate%20Error%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-57913%22%20slang%3D%22en-US%22%3E%3CP%3EWe%20had%20a%20DNS%20server%20(small-office%20router%20actually)%20apparently%20corrupting%20DNS%20lookups%20%E2%80%93%20I%20suspect%20because%20the%20record%20Office%20365%20returns%20is%20rather%20large%2C%20what%20with%20multiple%20addresses%20and%20IPv6%20addresses.%20Outlook%20was%20presumably%20thus%20sent%20to%20an%20adjacent%20server%20in%20the%20Microsoft%20server%20farm.%20Certificate%20errors%20was%20the%20error%20there.%20It%20would%20be%20interesting%20to%20see%20what%20server%20names%20were%20allowed%20by%20the%20certificate.%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-51489%22%20slang%3D%22en-US%22%3ERe%3A%20Certificate%20Error%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-51489%22%20slang%3D%22en-US%22%3E%3CP%3EOur%20Office%202010%20is%20already%20up-to-date.%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-51483%22%20slang%3D%22en-US%22%3ERe%3A%20Certificate%20Error%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-51483%22%20slang%3D%22en-US%22%3E%3CP%3E%3CSPAN%3EUp%20to%20you%20but%20would%20recommend%20to%20get%20users%20with%20older%20version%20of%20outlook%20to%20run%20this%20tool%20to%20get%20latest%20updates%20from%20365.%26nbsp%3B%3C%2FSPAN%3E%3CA%20href%3D%22https%3A%2F%2Fwww.microsoft.com%2Fen-us%2Fdownload%2Fdetails.aspx%3Fid%3D50360%22%20target%3D%22_blank%22%20rel%3D%22noopener%20noreferrer%20noopener%20noreferrer%22%3Ehttps%3A%2F%2Fwww.microsoft.com%2Fen-us%2Fdownload%2Fdetails.aspx%3Fid%3D50360%3C%2FA%3E%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EBeen%20O365%20Support%20Engineer%2C%20we%20had%20few%20customers%20having%20issues.%26nbsp%3B%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-51475%22%20slang%3D%22en-US%22%3ERe%3A%20Certificate%20Error%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-51475%22%20slang%3D%22en-US%22%3E%3CP%3ENo%2C%20our%20email%20has%20been%20in%20Office365%20for%202%201%2F2%20years%20now.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EWe%20haven't%20seen%20the%20error%20since%20it%20first%20occurred%20so%20I'm%20going%20to%20pressume%20it%20was%20a%20temporary%26nbsp%3Berror%20on%20the%20server%20side.%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-51449%22%20slang%3D%22en-US%22%3ERe%3A%20Certificate%20Error%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-51449%22%20slang%3D%22en-US%22%3E%3CP%3EHi%2C%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EI%20am%20assuming%20you%20have%20recently%20migrated%20to%20O365.%20Please%20get%20users%20to%20run%20this%20O365%20diagnostic%20tool%20which%20will%20%26nbsp%3Bpick%20O365%20certificate%20and%20create%20outlook%20profile.%26nbsp%3B%3CA%20href%3D%22https%3A%2F%2Fdiagnostics.outlook.com%2F%23%2F%22%20target%3D%22_blank%22%20rel%3D%22nofollow%20noopener%20noreferrer%20noopener%20noreferrer%22%3Ehttps%3A%2F%2Fdiagnostics.outlook.com%2F%23%2F%3C%2FA%3E%26nbsp%3B%20if%20they%20have%20%26nbsp%3BO365%20valid%20exchange%20subscription%26nbsp%3Bplans.%26nbsp%3B%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EAlternatively%20you%20can%20also%20use%20this%20tool%20for%26nbsp%3B%3CSPAN%3EOffice%20365%20Desktop%20Setup%20Tool%20for%20Office%202010%20and%20Office%202007%20%26nbsp%3B%3CA%20href%3D%22https%3A%2F%2Fwww.microsoft.com%2Fen-us%2Fdownload%2Fdetails.aspx%3Fid%3D50360%22%20target%3D%22_blank%22%20rel%3D%22noopener%20noreferrer%20noopener%20noreferrer%22%3Ehttps%3A%2F%2Fwww.microsoft.com%2Fen-us%2Fdownload%2Fdetails.aspx%3Fid%3D50360%3C%2FA%3E%3C%2FSPAN%3E%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3E%3CSPAN%3EAlso%20look%20this%20KB%26nbsp%3B%3CA%20href%3D%22https%3A%2F%2Fsupport.microsoft.com%2Fen-gb%2Fhelp%2F3007582%2Fcertificate-error-message-when-you-start-outlook-or-create-an-outlook-profile%22%20target%3D%22_blank%22%20rel%3D%22noopener%20noreferrer%20noopener%20noreferrer%22%3Ehttps%3A%2F%2Fsupport.microsoft.com%2Fen-gb%2Fhelp%2F3007582%2Fcertificate-error-message-when-you-start-outlook-or-create-an-outlook-profile%26nbsp%3B%3C%2FA%3E%3C%2FSPAN%3E%3C%2FP%3E%3CP%3E%3CSPAN%3EPlease%20let%20me%20know%20if%20this%20solves%20issue.%20%26nbsp%3B%3C%2FSPAN%3E%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-51392%22%20slang%3D%22en-US%22%3ERe%3A%20Certificate%20Error%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-51392%22%20slang%3D%22en-US%22%3E%3CP%3EYou%20sometimes%20see%20an%20certificate%20error%20when%20connected%20to%20(for%20example)%20hotel%20wifi%2C%20whoch%20terminates%20ssl%20connections%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-50845%22%20slang%3D%22en-US%22%3ERe%3A%20Certificate%20Error%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-50845%22%20slang%3D%22en-US%22%3E%3CP%3EWhy%20would%20I%20need%20a%20SSL%20certificate%20when%20I'm%20connecting%20to%20outlook.office365.com%3F%3C%2FP%3E%3CP%3EOur%20Autodiscover%20CNAME%20entry%20for%20our%20domain%20points%20to%20autodiscover.office365.com.%20All%20of%20our%20mailboxes%20are%20in%20Office365%2C%20none%20are%20on-prem.%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-50772%22%20slang%3D%22en-US%22%3ERe%3A%20Certificate%20Error%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-50772%22%20slang%3D%22en-US%22%3E%3CP%3EThis%20is%20common%20erorr%20if%20you%20do%20not%20have%20the%20SSL%20certificate%20by%20compelete%20FQDN%20of%20destined%20client%20domain%2Fserver.%20Example%3A%20server1.contoso.com.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3ETry%20fixing%20the%20name%20of%20the%20certificates%20in%20your%20environment%2Foffice365%20connection.%20Infact%20you%20have%20to%20improt%20new%20certificate%20from%20CA%20authority%20server%20in%20your%20environment.%26nbsp%3B%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EHope%20this%20helps%20you%20to%20fix%20the%20issue%20at%20your%20IT%20environement.%26nbsp%3B%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-50632%22%20slang%3D%22en-US%22%3ERe%3A%20Certificate%20Error%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-50632%22%20slang%3D%22en-US%22%3E%3CP%3EOk%20Cary%2C%26nbsp%3B%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EIf%20the%20problem%20presists%2C%20please%20take%20the%20screen%20shoot%20to%20see%20the%20certificate.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EThanks%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-50629%22%20slang%3D%22en-US%22%3ERe%3A%20Certificate%20Error%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-50629%22%20slang%3D%22en-US%22%3E%3CP%3ENo%2C%20it's%20not%20Hybrid.%3C%2FP%3E%3CP%3EI%20didn't%20get%20a%20screen%20shot%20of%20that%20unfortunately.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-50620%22%20slang%3D%22en-US%22%3ERe%3A%20Certificate%20Error%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-50620%22%20slang%3D%22en-US%22%3E%3CP%3EHi%20Cary%2C%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EThere%20is%20an%20Hybrid%20implementation%20%3F%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EWhat%20the%20certificate%20says%20when%20you%20click%20on%20%22View%20Certificate%22%20%3F%3C%2FP%3E%3C%2FLINGO-BODY%3E
Highlighted
Super Contributor

Couple of my users are receiving this error for outlook.office365.com in Outlook 2010.

Any ideas?

ErrorError

14 Replies
Highlighted

Hi Cary,

 

There is an Hybrid implementation ?

 

What the certificate says when you click on "View Certificate" ?

Highlighted

No, it's not Hybrid.

I didn't get a screen shot of that unfortunately.

 

 

 

 

Highlighted

Ok Cary, 

 

If the problem presists, please take the screen shoot to see the certificate.

 

Thanks

Highlighted

This is common erorr if you do not have the SSL certificate by compelete FQDN of destined client domain/server. Example: server1.contoso.com.

 

Try fixing the name of the certificates in your environment/office365 connection. Infact you have to improt new certificate from CA authority server in your environment. 

 

Hope this helps you to fix the issue at your IT environement. 

Highlighted

Why would I need a SSL certificate when I'm connecting to outlook.office365.com?

Our Autodiscover CNAME entry for our domain points to autodiscover.office365.com. All of our mailboxes are in Office365, none are on-prem.

Highlighted

You sometimes see an certificate error when connected to (for example) hotel wifi, whoch terminates ssl connections

Highlighted

Hi,

 

I am assuming you have recently migrated to O365. Please get users to run this O365 diagnostic tool which will  pick O365 certificate and create outlook profile. https://diagnostics.outlook.com/#/  if they have  O365 valid exchange subscription plans. 

 

Alternatively you can also use this tool for Office 365 Desktop Setup Tool for Office 2010 and Office 2007  https://www.microsoft.com/en-us/download/details.aspx?id=50360

 

 

Also look this KB https://support.microsoft.com/en-gb/help/3007582/certificate-error-message-when-you-start-outlook-or...

Please let me know if this solves issue.  

Highlighted

No, our email has been in Office365 for 2 1/2 years now.

 

We haven't seen the error since it first occurred so I'm going to pressume it was a temporary error on the server side.

Highlighted

Up to you but would recommend to get users with older version of outlook to run this tool to get latest updates from 365. https://www.microsoft.com/en-us/download/details.aspx?id=50360

 

Been O365 Support Engineer, we had few customers having issues. 

Highlighted

Our Office 2010 is already up-to-date.

Highlighted

We had a DNS server (small-office router actually) apparently corrupting DNS lookups – I suspect because the record Office 365 returns is rather large, what with multiple addresses and IPv6 addresses. Outlook was presumably thus sent to an adjacent server in the Microsoft server farm. Certificate errors was the error there. It would be interesting to see what server names were allowed by the certificate.

Highlighted

Looks like a proxy certificate issue. Especially, if users connect to internal source (e.g. SharePoint) and Office 365 using Outlook.

 

Highlighted

We have a couple of clients with this error.  They have two different Internet Service PRoviders, one active and one of backup. Booth customers had the same ISP active, we change to the backup ISP for all out connections.

We check DNS, SPN, outlook´s updates, etc..

The issue was fixed changing the ISP .

Greats

Highlighted
HI cary!
Trouble to confirm whether all users have this problem。
If it is a few users, reconfigure Outlook is resolved!