Home

Outlook - Certificate has been revoked

%3CLINGO-SUB%20id%3D%22lingo-sub-34094%22%20slang%3D%22en-US%22%3EOutlook%20-%20Certificate%20has%20been%20revoked%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-34094%22%20slang%3D%22en-US%22%3E%3CP%3EHi%20all%2C%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3Enot%20sure%20if%20anyone%20has%20experienced%20it%2C%20but%20we%20are%20getting%20tthis%20error%20multiple%20times%20a%20day%20when%20using%20outlook.%3C%2FP%3E%3CP%3EIt%20says%20%3A%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EOutlook.office365.com%3C%2FP%3E%3CP%3EInformation%20you%20Exchange%20with%20this%20site%20cannot%20be%20viewed%20or%20changed%20by%20others.%20However%2C%20there%20is%20a%20problem%20with%20the%20sites%20security%20certificate.%3C%2FP%3E%3CP%3EThe%20security%20certificate%20for%20this%20site%20has%20been%20revoked%2C%3C%2FP%3E%3CP%3EThis%20site%20should%20not%20be%20trusted%2C%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EIf%20we%20dont%20click%20OK%2C%20outlook%20cannot%20send%20or%20receive%20emails.%20Sometime%20this%20window%20is%20hidden%20behind%20and%20therefor%20are%20not%20aware%20of%20it%20during%20the%20day.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3Eif%20we%20click%20view%20certificate%2C%20it%20looks%20legit%20and%20everything%20seems%20to%20be%20ok.%20If%20enter%20OWA%2C%20we%20get%20same%20certificate(according%20to%20thumbprint)%2C%20but%20there%20is%20no%20warning%20or%20error%2C%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EWe%20have%20created%20a%20case%20with%20Exchange%20online%20team%2C%20but%20they%20say%20there%20are%20no%20error%20from%20their%20side%20and%20its%20internal%20network%20issue.%3C%2FP%3E%3CP%3EWe%20have%20cleared%20certificate%20revoke%20list%20from%20our%20DNS%20servers%20without%20any%20help.%3C%2FP%3E%3CP%3EAny%20ideas%20on%20how%20to%20troubleshoot%20this%20further%3F%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EWe%20use%20Outlook%202016%20with%20latest%20updates%20and%20have%20all%20mailboxes%20in%20Exchange%20online.%3C%2FP%3E%3CP%3EI%20only%20have%20my%20archive%20mailbox%20attached%20to%20my%20outlook%2C%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EThanks!%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-LABS%20id%3D%22lingo-labs-34094%22%20slang%3D%22en-US%22%3E%3CLINGO-LABEL%3E2016%3C%2FLINGO-LABEL%3E%3CLINGO-LABEL%3EExchange%20Online%3C%2FLINGO-LABEL%3E%3CLINGO-LABEL%3EOffice%20365%3C%2FLINGO-LABEL%3E%3C%2FLINGO-LABS%3E%3CLINGO-SUB%20id%3D%22lingo-sub-313457%22%20slang%3D%22en-US%22%3ERe%3A%20Outlook%20-%20Certificate%20has%20been%20revoked%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-313457%22%20slang%3D%22en-US%22%3E%3CP%3EJust%20to%20add%20to%20my%20previous%20message%20I%20have%20now%20viewed%20the%20certificate%20and%20clicked%20on%20the%20tab%26nbsp%3Btitled%20Certification%20Path.%20This%20says%3A%20this%20certificate%20is%20okay.%3CBR%20%2F%3E%3CBR%20%2F%3EDoes%20that%20mean%20there%20is%20actually%20no%20problem%20and%20this%20is%20just%20a%20glitch%3F%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-313455%22%20slang%3D%22en-US%22%3ERe%3A%20Outlook%20-%20Certificate%20has%20been%20revoked%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-313455%22%20slang%3D%22en-US%22%3E%3CP%3EI%20keep%20getting%20the%20message%20outlook.%20Office365.Com%20has%20had%20its%20security%20certificate%20revoked.%20Is%20this%20true%3F%20What%20action%20should%20I%20take%3F%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-177400%22%20slang%3D%22en-US%22%3ERe%3A%20Outlook%20-%20Certificate%20has%20been%20revoked%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-177400%22%20slang%3D%22en-US%22%3E%3CP%3ENo%20it%20wasn't%2C%20we%20narrowed%20down%20the%20issue%20to%20be%20on%20the%20ISP%20side%20MTU%20size.%20Our%20clients%20that%20were%20affected%20both%20have%20the%20same%20internet%20service%20provider%20they%20made%20changes%20on%20their%20end%20and%20the%20issue%20has%20been%20resolved.%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-177377%22%20slang%3D%22en-US%22%3ERe%3A%20Outlook%20-%20Certificate%20has%20been%20revoked%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-177377%22%20slang%3D%22en-US%22%3EWas%20it%20solved%20after%20updates%3F%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-128621%22%20slang%3D%22en-US%22%3ERe%3A%20Outlook%20-%20Certificate%20has%20been%20revoked%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-128621%22%20slang%3D%22en-US%22%3E%3CP%3EThank%20you%20for%20the%20info%2C%20I'm%20sure%20it%20will%20help%20out%20to%20have%20an%20established%20case%20for%20them%20to%20reference.%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-128616%22%20slang%3D%22en-US%22%3ERe%3A%20Outlook%20-%20Certificate%20has%20been%20revoked%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-128616%22%20slang%3D%22en-US%22%3E%3CBLOCKQUOTE%3E%3CHR%20%2F%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F95284%22%20target%3D%22_blank%22%3E%40Jeffrey%20Baltezegar%3C%2FA%3E%20wrote%3A%3CBR%20%2F%3E%3CP%3EThanks%20for%20your%20update.%26nbsp%3B%20Are%20you%20seeing%20this%20problem%20intermittently%20as%20well%3F%26nbsp%3B%20I%20haven't%20been%20able%20to%20generate%20the%20message%20on-demand.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EI%20had%20to%20call%20Microsoft%20twice%20yesterday%20just%20to%20get%20them%20to%20call%20back.%20When%20they%20did%2C%20the%20support%20%22engineer%22%20finally%20sounded%20as%20though%20she%20was%20taking%20this%20issue%20seriously.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EI%20also%20contacted%20DigiCert%20support%2C%20who%20confirmed%20that%20the%20certificate%20is%20not%20revoked.%3C%2FP%3E%3CHR%20%2F%3E%3C%2FBLOCKQUOTE%3E%3CP%3EYes%20it%20was%20very%20intermittent.%20Sometimes%20every%20day%20and%20then%20not%20for%20a%20few%20weeks.%20I%20haven't%20had%20the%20error%20in%20more%20than%20two%20months%20now.%20Our%20casenr%20was%26nbsp%3B117052315783924%2C%20you%20can%20refer%20to%20that%20if%20you%20wish.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EPS%20I%20just%20realized%20you%20didn't%20ask%20me%20but%20Jane.%20In%20any%20case%20extra%20info%20supplied.%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-128576%22%20slang%3D%22en-US%22%3ERe%3A%20Outlook%20-%20Certificate%20has%20been%20revoked%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-128576%22%20slang%3D%22en-US%22%3E%3CP%3EThanks%20for%20your%20update.%26nbsp%3B%20Are%20you%20seeing%20this%20problem%20intermittently%20as%20well%3F%26nbsp%3B%20I%20haven't%20been%20able%20to%20generate%20the%20message%20on-demand.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EI%20had%20to%20call%20Microsoft%20twice%20yesterday%20just%20to%20get%20them%20to%20call%20back.%20When%20they%20did%2C%20the%20support%20%22engineer%22%20finally%20sounded%20as%20though%20she%20was%20taking%20this%20issue%20seriously.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EI%20also%20contacted%20DigiCert%20support%2C%20who%20confirmed%20that%20the%20certificate%20is%20not%20revoked.%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-128283%22%20slang%3D%22en-US%22%3ERe%3A%20Outlook%20-%20Certificate%20has%20been%20revoked%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-128283%22%20slang%3D%22en-US%22%3E%3CP%3EThank%20you%20for%20the%20response.%20%26nbsp%3B%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EI'll%20test%20updates%20to%20see%20if%20that%20helps.%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-128276%22%20slang%3D%22en-US%22%3ERe%3A%20Outlook%20-%20Certificate%20has%20been%20revoked%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-128276%22%20slang%3D%22en-US%22%3E%3CP%3EUnfortunately%20the%20cause%20was%20never%20found.%20MS%20was%20able%20to%20reproduce%20it%20twice%20on%20their%20end%20but%26nbsp%3Bdidn't%20get%20the%20required%20logging.%20After%20that%20it%20didn't%20occur%20anymore.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EAs%20we%20didn't%20change%20anything%20on%20our%20end%2C%20I%20had%20a%20suspicion%20they%20fixed%20it%20silently%20in%20one%20of%20their%20updates%20recently.%20Have%20you%20tried%20updating%20Outlook%20to%20the%20latest%20update%3F%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-128256%22%20slang%3D%22en-US%22%3ERe%3A%20Outlook%20-%20Certificate%20has%20been%20revoked%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-128256%22%20slang%3D%22en-US%22%3E%3CBLOCKQUOTE%3E%3CHR%20%2F%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F95284%22%20target%3D%22_blank%22%3E%40Jeffrey%20Baltezegar%3C%2FA%3E%20wrote%3A%3CBR%20%2F%3E%3CP%3EWas%20resolution%20ever%20identified%20for%20this%20problem%3F%20I%20have%20the%20exact%20same%20issue%20with%20the%20exact%20same%20certificate.%26nbsp%3B%20I%20opened%20a%20case%20with%20Microsoft%20support%20but%20they%20have%20not%20been%20any%20help%20so%20far.%26nbsp%3B%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3ENo%20changes%20have%20been%20made%20to%20our%20network%2C%20the%20CRL%20isn't%20being%20blocked%20by%20anything%2C%20it%20doesn't%20contain%20the%20serial%20number%20of%20the%20certificate%20in%20question%20and%20the%20problem%20is%20intermittent.%3C%2FP%3E%3CHR%20%2F%3E%3C%2FBLOCKQUOTE%3E%3CP%3EHello%20Jeffrey%2C%3C%2FP%3E%3CP%3EWe%20have%20a%20case%20open%20with%20Microsoft%2C%20they%20requested%20for%20logs%26nbsp%3Band%20they%20have%20escalated%20it%2C%20so%20far%20its%20a%20waiting%20game.%20Not%20sure%20of%20others.%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-128243%22%20slang%3D%22en-US%22%3ERe%3A%20Outlook%20-%20Certificate%20has%20been%20revoked%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-128243%22%20slang%3D%22en-US%22%3E%3CP%3EWas%20resolution%20ever%20identified%20for%20this%20problem%3F%20I%20have%20the%20exact%20same%20issue%20with%20the%20exact%20same%20certificate.%26nbsp%3B%20I%20opened%20a%20case%20with%20Microsoft%20support%20but%20they%20have%20not%20been%20any%20help%20so%20far.%26nbsp%3B%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3ENo%20changes%20have%20been%20made%20to%20our%20network%2C%20the%20CRL%20isn't%20being%20blocked%20by%20anything%2C%20it%20doesn't%20contain%20the%20serial%20number%20of%20the%20certificate%20in%20question%20and%20the%20problem%20is%20intermittent.%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-112690%22%20slang%3D%22en-US%22%3ERe%3A%20Outlook%20-%20Certificate%20has%20been%20revoked%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-112690%22%20slang%3D%22en-US%22%3E%3CBLOCKQUOTE%3E%3CHR%20%2F%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F54629%22%20target%3D%22_blank%22%3E%40%C2%AEwin%20.%3C%2FA%3E%20wrote%3A%3CBR%20%2F%3E%3CBLOCKQUOTE%3E%3CHR%20%2F%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F118%22%20target%3D%22_blank%22%3E%40Javier%20Garcia%3C%2FA%3E%20wrote%3A%3CBR%20%2F%3E%3CP%3EOpened%20a%202nd%20ticket%20for%20Outlook%20since%20MS%20support%20always%20points%20fingers%20back%20and%20forth%20(117052515798731).%20Still%20getting%20no%20where%20and%20they've%20already%20quit%20trying%20to%20try%20and%20support%20the%20ticket%20since%20we%20are%20unable%20to%20reproduce%20the%20issue%20on%20command.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3ENote%2C%20we%20have%20tried%20applying%20the%20%22workarounds%22%20by%20suppressing%20the%20prompt%20in%20IE%20and%20Outlook%20(HKCU%5C%3CSPAN%3Esoftware%5Cpolicies%5Cmicrosoft%5Coffice%5C16.0%5Coutlook%5Csecurity%5Cusecrlchasing%20Value%3D2)%26nbsp%3B%3C%2FSPAN%3Ebut%20still%20doesn't%20seem%20to%20work.%26nbsp%3B%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EOnly%20solution%20so%20far%20is%20to%20roll%20people%20back%20to%20Office%202013.%26nbsp%3B%3C%2FP%3E%3CHR%20%2F%3E%3C%2FBLOCKQUOTE%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F12628%22%20target%3D%22_blank%22%3E%40Javier%3C%2FA%3E%20I%20got%20word%20you%20closed%20the%20case%20because%20you%20find%20the%20issue%20to%20be%20related%20to%20your%20reverse%20proxy%2C%20is%20this%20correct%3F%3C%2FP%3E%3CHR%20%2F%3E%3C%2FBLOCKQUOTE%3E%3CP%3EThank%20you%20for%20the%20response.%20we%20opened%20a%20case%20and%20worked%20with%20MS%20support%20on%20the%20issue%20and%20they%20recommended%26nbsp%3B%20bypassing%20autodiscover%20by%20modifying%20the%20registry%20keys%2C%20however%20issue%20still%20persists.%20Issue%20only%20affects%20a%20couple%20of%20users.%20Will%20check%20to%20make%20sure%20they%20have%20the%20latest%20Office%202016%20updates%3C%2FP%3E%3CP%3Eand%20alos%20run%20an%20online%20full%20repair.%20We%20prefer%20not%20to%20downgrade%26nbsp%3Bto%20Office%202013.%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-112036%22%20slang%3D%22en-US%22%3ERe%3A%20Outlook%20-%20Certificate%20has%20been%20revoked%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-112036%22%20slang%3D%22en-US%22%3E%3CBLOCKQUOTE%3E%3CHR%20%2F%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F118%22%20target%3D%22_blank%22%3E%40Javier%20Garcia%3C%2FA%3E%20wrote%3A%3CBR%20%2F%3E%3CP%3EOpened%20a%202nd%20ticket%20for%20Outlook%20since%20MS%20support%20always%20points%20fingers%20back%20and%20forth%20(117052515798731).%20Still%20getting%20no%20where%20and%20they've%20already%20quit%20trying%20to%20try%20and%20support%20the%20ticket%20since%20we%20are%20unable%20to%20reproduce%20the%20issue%20on%20command.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3ENote%2C%20we%20have%20tried%20applying%20the%20%22workarounds%22%20by%20suppressing%20the%20prompt%20in%20IE%20and%20Outlook%20(HKCU%5C%3CSPAN%3Esoftware%5Cpolicies%5Cmicrosoft%5Coffice%5C16.0%5Coutlook%5Csecurity%5Cusecrlchasing%20Value%3D2)%26nbsp%3B%3C%2FSPAN%3Ebut%20still%20doesn't%20seem%20to%20work.%26nbsp%3B%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EOnly%20solution%20so%20far%20is%20to%20roll%20people%20back%20to%20Office%202013.%26nbsp%3B%3C%2FP%3E%3CHR%20%2F%3E%3C%2FBLOCKQUOTE%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F12628%22%20target%3D%22_blank%22%3E%40Javier%3C%2FA%3E%20I%20got%20word%20you%20closed%20the%20case%20because%20you%20find%20the%20issue%20to%20be%20related%20to%20your%20reverse%20proxy%2C%20is%20this%20correct%3F%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-112035%22%20slang%3D%22en-US%22%3ERe%3A%20Outlook%20-%20Certificate%20has%20been%20revoked%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-112035%22%20slang%3D%22en-US%22%3E%3CP%3EUnfortunately%20not.%20MS%20was%20able%20to%20reproduce%20against%20our%20environment%20once%2C%20but%20hasn't%20occurred%20since.%20I%20haven't%20had%20the%20revoked%20popup%20since%20a%20month%2C%20so%20it%20might%20be%20that%20is%20has%20been%20resolved%20in%20an%20update.%20Are%20you%20still%20getting%20it%20with%20Outlook%202016%20updated%20to%20the%20latest%20version%3F%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-111861%22%20slang%3D%22en-US%22%3ERe%3A%20Outlook%20-%20Certificate%20has%20been%20revoked%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-111861%22%20slang%3D%22en-US%22%3EUpdate%20to%20Outlook%202016%2C%20if%20u%20already%20have%20it%2C%20do%20a%20online%20repair%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-111079%22%20slang%3D%22en-US%22%3ERe%3A%20Outlook%20-%20Certificate%20has%20been%20revoked%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-111079%22%20slang%3D%22en-US%22%3E%3CP%3EAnyone%20found%20a%20solution%20for%20this%20issue.%20Microsoft%20support%20is%20of%20no%20help.%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-98107%22%20slang%3D%22en-US%22%3ERe%3A%20Outlook%20-%20Certificate%20has%20been%20revoked%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-98107%22%20slang%3D%22en-US%22%3E%3CP%3Eany%20news%20with%20this%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-89410%22%20slang%3D%22en-US%22%3ERe%3A%20Outlook%20-%20Certificate%20has%20been%20revoked%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-89410%22%20slang%3D%22en-US%22%3E%3CP%3EOur%20case%20is%20also%20still%20open%20(REG%3A117052315783924).%20Not%20getting%20closer%20to%20a%20solution%20yet%20unfortunately.%20They%20keep%20asking%20for%20traces%20we%20cannot%20give%20as%20the%20issue%20can't%20be%20reproduced%20on%20demand.%20In%20the%20mean%20time%20I've%20supplied%20some%20dump%20files%2C%20but%20that%20didn't%20bring%20us%20any%20closer%20as%20well%20it%20seems...%20I'll%20update%20when%20we%20get%20more%20news%20from%20MS.%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-79073%22%20slang%3D%22en-US%22%3ERe%3A%20Outlook%20-%20Certificate%20has%20been%20revoked%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-79073%22%20slang%3D%22en-US%22%3E%3CP%3ECan%20this%20be%20related%20to%20this%3F%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Fsupport.office.com%2Fen-us%2Farticle%2FOffice-365-URLs-and-IP-address-ranges-8548a211-3fe7-47cb-abb1-355ea5aa88a2%22%20target%3D%22_blank%22%20rel%3D%22noopener%20noreferrer%20noopener%20noreferrer%22%3Ehttps%3A%2F%2Fsupport.office.com%2Fen-us%2Farticle%2FOffice-365-URLs-and-IP-address-ranges-8548a211-3fe7-47cb-abb1-355ea5aa88a2%3C%2FA%3E%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3E%3CSPAN%3EI%20see%20addition%20of%26nbsp%3B%3C%2FSPAN%3E%3CA%20href%3D%22http%3A%2F%2Fcrl4.digicert.com%2FDigiCertCloudServicesCA-1-g1.crl%22%20target%3D%22_blank%22%20rel%3D%22nofollow%20noopener%20noreferrer%20noopener%20noreferrer%22%3Ehttp%3A%2F%2Fcrl4.digicert.com%2FDigiCertCloudServicesCA-1-g1.crl%3C%2FA%3E%3CSPAN%3E%26nbsp%3Bin%26nbsp%3B%3C%2FSPAN%3E%3CSPAN%3EOffice%20365%20Certificate%20Revocation%20List%20(Root%20URLs)%3C%2FSPAN%3E%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-76063%22%20slang%3D%22en-US%22%3ERe%3A%20Outlook%20-%20Certificate%20has%20been%20revoked%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-76063%22%20slang%3D%22en-US%22%3E%3CP%3EOpened%20a%202nd%20ticket%20for%20Outlook%20since%20MS%20support%20always%20points%20fingers%20back%20and%20forth%20(117052515798731).%20Still%20getting%20no%20where%20and%20they've%20already%20quit%20trying%20to%20try%20and%20support%20the%20ticket%20since%20we%20are%20unable%20to%20reproduce%20the%20issue%20on%20command.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3ENote%2C%20we%20have%20tried%20applying%20the%20%22workarounds%22%20by%20suppressing%20the%20prompt%20in%20IE%20and%20Outlook%20(HKCU%5C%3CSPAN%3Esoftware%5Cpolicies%5Cmicrosoft%5Coffice%5C16.0%5Coutlook%5Csecurity%5Cusecrlchasing%20Value%3D2)%26nbsp%3B%3C%2FSPAN%3Ebut%20still%20doesn't%20seem%20to%20work.%26nbsp%3B%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EOnly%20solution%20so%20far%20is%20to%20roll%20people%20back%20to%20Office%202013.%26nbsp%3B%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-75619%22%20slang%3D%22en-US%22%3ERe%3A%20Outlook%20-%20Certificate%20has%20been%20revoked%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-75619%22%20slang%3D%22en-US%22%3EJust%20a%20quick%20note.%20We%20have%20the%20same%20issues%2C%20but%20no%20proxy%20in%20between.%20Doubt%20it%20is%20related%20to%20your%20(forward)%20proxy%2C%20or%20did%20you%20mean%20reverse%3F%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-75618%22%20slang%3D%22en-US%22%3ERe%3A%20Outlook%20-%20Certificate%20has%20been%20revoked%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-75618%22%20slang%3D%22en-US%22%3E%3CP%3EThanks.%20I%20created%20a%20case%20as%20well%20and%20referenced%20yours.%26nbsp%3B%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EFound%20out%20something%20interesting.%20Everytime%20the%20revoked%20message%20appears%2C%20I%20have%202%26nbsp%3BLync%20event%20in%20my%20application%20eventlog%20at%20exactly%20that%20timestamp%3A%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3ELync%20has%20enabled%20event%20logging.%3CBR%20%2F%3EInformation%20about%20failed%20calls%20will%20be%20sent%20to%20the%20Windows%20event%20log.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3Eand%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3ELyncPlatform%20has%20enabled%20event%20logging.%3CBR%20%2F%3EInformation%20about%20failed%20calls%20will%20be%20sent%20to%20the%20Windows%20event%20log.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EOther%20than%20this%2C%20it%20seems%20totally%20random.%20Can%20stay%20away%20for%20weeks%2C%20then%20popup%20daily.%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-73292%22%20slang%3D%22en-US%22%3ERe%3A%20Outlook%20-%20Certificate%20has%20been%20revoked%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-73292%22%20slang%3D%22en-US%22%3E%3CBLOCKQUOTE%3E%3CHR%20%2F%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F33562%22%20target%3D%22_blank%22%3E%40James%20Chapman%3C%2FA%3E%20wrote%3A%3CBR%20%2F%3E%3CP%3Ecan't%20find%20the%20cause.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3Eour%20proxy%20solution%3C%2FP%3E%3CHR%20%2F%3E%3C%2FBLOCKQUOTE%3E%3CP%3EI'm%20not%20a%20betting%20man%2C%20but...%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-73096%22%20slang%3D%22en-US%22%3ERe%3A%20Outlook%20-%20Certificate%20has%20been%20revoked%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-73096%22%20slang%3D%22en-US%22%3E%5BREG%3A117051515740234%5D%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-72648%22%20slang%3D%22en-US%22%3ERe%3A%20Outlook%20-%20Certificate%20has%20been%20revoked%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-72648%22%20slang%3D%22en-US%22%3E%3CP%3EHi%2C%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EWe're%20experiencing%20the%20same%20issue%20as%20%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F57065%22%20target%3D%22_blank%22%3E%3CFONT%20color%3D%22%230077d4%22%3E%40Amir%20Jafarian%3C%2FFONT%3E%3C%2FA%3E%26nbsp%3B%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EFully%20patched%20msi%20version%20of%20Outlook%202016.%20Connecting%20to%26nbsp%3BExchange%20online.%26nbsp%3BSporadic%20Digicert%20certificate%20warnings%20across%20the%20org.%20Seems%20to%20happen%20most%20commonly%20when%20waking%20a%20device%20from%20sleep.%20I'd%20agree%20it%20looks%20like%20issues%20checking%20the%20CRL%20but%20can't%20find%20the%20cause.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EWe've%20got%20tickets%20open%20with%20Microsoft%20and%20our%20proxy%20vendor%20but%20not%20getting%20anywhere%20fast.%20We've%20had%20our%20proxy%20solution%20in%20place%20for%20some%20time%20without%20issue%20and%20nothing%20has%20changed.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EI'll%20post%20if%20we%20find%20anything.%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-72577%22%20slang%3D%22en-US%22%3ERe%3A%20Outlook%20-%20Certificate%20has%20been%20revoked%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-72577%22%20slang%3D%22en-US%22%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F57065%22%20target%3D%22_blank%22%3E%40Amir%20Jafarian%3C%2FA%3E%26nbsp%3Bthat%20looks%20like%20either%20a%20problem%20communicating%20with%20the%20CRL%20or%20there%20might%20be%20another%20issue%20with%20your%20system%20or%20an%20intermediate%20network%20device%20(like%20a%20proxy).%20Since%20you%20are%20connecting%20to%20Exchange%20Online%20you%20can%20raise%20a%20support%20ticket%20with%20Microsoft%20for%20troubleshooting%20assistance.%20You%20can%20also%20try%20running%20diagnostics%20with%20the%20SARA%20tool%20(%3CA%20href%3D%22https%3A%2F%2Fdiagnostics.outlook.com%22%20target%3D%22_blank%22%20rel%3D%22nofollow%20noopener%20noreferrer%20noopener%20noreferrer%22%3Ehttps%3A%2F%2Fdiagnostics.outlook.com%3C%2FA%3E).%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EOther%20posters%20are%20complaining%20of%20certificate%20popups%20for%20on-premises%20Exchange%20server%20environments%2C%20which%20could%20be%20an%20entirely%20different%20problem%20with%20their%20server%20or%20certificate%20configuration.%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-72565%22%20slang%3D%22en-US%22%3ERe%3A%20Outlook%20-%20Certificate%20has%20been%20revoked%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-72565%22%20slang%3D%22en-US%22%3E%3CP%3EHere%20is%20the%20error%20message%20(Office%20365)%3A%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3E%3CSPAN%20class%3D%22lia-inline-image-display-wrapper%20lia-image-align-inline%22%20style%3D%22width%3A%20778px%3B%22%3E%3CIMG%20src%3D%22https%3A%2F%2Fgxcuf89792.i.lithium.com%2Ft5%2Fimage%2Fserverpage%2Fimage-id%2F14969iF400EFE1AAE28E4A%2Fimage-size%2Flarge%3Fv%3D1.0%26amp%3Bpx%3D999%22%20alt%3D%22CertError.png%22%20title%3D%22CertError.png%22%20%2F%3E%3C%2FSPAN%3E%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-72195%22%20slang%3D%22en-US%22%3ERe%3A%20Outlook%20-%20Certificate%20has%20been%20revoked%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-72195%22%20slang%3D%22en-US%22%3E%3CP%3EIf%20you're%20having%20certificate%20warnings%20in%20Outlook%20for%20an%20on-prem%20Exchange%20deployment%20you%20should%20post%20a%20screenshot%20here%20so%20we%20can%20see%20exactly%20what%20the%20warning%20says.%20There's%20a%20number%20of%20potential%20problems%20and%20solutions%20for%20certificate%20issues.%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-72179%22%20slang%3D%22en-US%22%3ERe%3A%20Outlook%20-%20Certificate%20has%20been%20revoked%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-72179%22%20slang%3D%22en-US%22%3ECan%20you%20send%20me%20your%20support%20nr%3F%20I%20will%20create%20a%20premier%20support%20request%20today%20and%20can%20reference%20your%20ticket.%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-72040%22%20slang%3D%22en-US%22%3ERe%3A%20Outlook%20-%20Certificate%20has%20been%20revoked%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-72040%22%20slang%3D%22en-US%22%3E%3CP%3ESame%20issue.%20Exchange%202013%2C%20Load-balanced%20servers%20via%20Netscaler.%20Noticed%20after%20upgrading%20clients%20to%202016.%20Ticket%20open%20with%20MS%20support%20but%20their%20only%20solution%20is%20to%20disable%20the%20%22Check%20for%20Publisher's%20Certificate%20Revocation%22%20in%20IE%20which%20is%20not%20a%20real%20solution.%26nbsp%3B%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-68224%22%20slang%3D%22en-US%22%3ERe%3A%20Outlook%20-%20Certificate%20has%20been%20revoked%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-68224%22%20slang%3D%22en-US%22%3EThis%20is%20not%20relevant.%20We%20are%20seeing%20a%20certificate%20revoked%20message%20when%20there%20is%20nothing%20wrong%20with%20the%20certificate.%20Also%20the%20message%20doesn't%20pop%20up%20when%20creating%20a%20profile%2C%20but%20during%20use%20of%20Outlook%2C%20about%20once%20or%20twice%20a%20day.%20Sometimes%20it%20doesn't%20popup%20for%20days.%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-68222%22%20slang%3D%22en-US%22%3ERe%3A%20Outlook%20-%20Certificate%20has%20been%20revoked%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-68222%22%20slang%3D%22en-US%22%3E%3CP%3EHaving%20the%20exact%20same%20issue%20here%20since%20upgrading%20to%20Outlook%202016%20icw%20Exchange%202016%20onprem.%20fyi%20we%20are%20using%20a%20Netscaler%20as%20a%20reverse%20proxy.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EHas%20anyone%20found%20a%20fix%20for%20this%3F%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-58102%22%20slang%3D%22en-US%22%3ERe%3A%20Outlook%20-%20Certificate%20has%20been%20revoked%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-58102%22%20slang%3D%22en-US%22%3E%3CP%3EIs%20this%20issue%20causing%20for%20all%20the%20users%20or%20limited%20users%3F%20what%20is%20your%20outlook%20version%3F%20If%20this%20is%20happening%20only%20for%20outlook%202013%2C%20refer%20to%20the%20MS%20article%20to%20resolve%20this%20you%20need%20to%20install%20hotfix-%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Fsupport.microsoft.com%2Fen-us%2Fhelp%2F3007582%2Fcertificate-error-message-when-you-start-outlook-or-create-an-outlook-profile%22%20target%3D%22_blank%22%20rel%3D%22noopener%20noreferrer%20noopener%20noreferrer%22%3Ehttps%3A%2F%2Fsupport.microsoft.com%2Fen-us%2Fhelp%2F3007582%2Fcertificate-error-message-when-you-start-outlook-%3C%2FA%3E%3C%2FP%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Fsupport.microsoft.com%2Fen-us%2Fhelp%2F3007582%2Fcertificate-error-message-when-you-start-outlook-or-create-an-outlook-profile%22%20target%3D%22_blank%22%20rel%3D%22noopener%20noreferrer%20noopener%20noreferrer%22%3Eor-create-an-outlook-profile%3C%2FA%3E%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-57999%22%20slang%3D%22en-US%22%3ERe%3A%20Outlook%20-%20Certificate%20has%20been%20revoked%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-57999%22%20slang%3D%22en-US%22%3E%3CP%3EHas%20anyone%20found%20a%20solution%20to%20this%3F%20%26nbsp%3BI'm%20experiencing%20it%20with%20Exchange%202016%20CU2%20on-prem.%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-35851%22%20slang%3D%22en-US%22%3ERe%3A%20Outlook%20-%20Certificate%20has%20been%20revoked%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-35851%22%20slang%3D%22en-US%22%3E%3CP%3EHi%2C%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3Esame%20Problem%20here.%20We%20are%20deploying%20a%20new%20Exchange%20Server%202016%20and%20some%20Clients%20have%20this%20problem%20sometimes.%3C%2FP%3E%3CUL%3E%3CLI%3ECA-ROOT%20is%20inside%20Trusted%20Root%20Certification%20Authorities%3C%2FLI%3E%3CLI%3EInternet%20Explorer%20shows%20everything%20as%20valid%3C%2FLI%3E%3CLI%3ECRL%20is%20reachable%20from%20inside%20and%20outside%3C%2FLI%3E%3C%2FUL%3E%3CP%3EPlease%20help%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3Ebr%3C%2FP%3E%3CP%3ERobert%20Skawinski%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-34342%22%20slang%3D%22en-US%22%3ERe%3A%20Outlook%20-%20Certificate%20has%20been%20revoked%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-34342%22%20slang%3D%22en-US%22%3E%3CP%3EHi%20Mark%2C%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3Eyes%20we%20can%20access%20the%20urls%20fine%20and%20the%20certificate%20is%20not%20on%20revoke%20list.%3C%2FP%3E%3CP%3EWe%20do%20use%20Zscaler%20for%20web%20filtering%2C%20but%20since%20the%20urls%20are%20not%20blocked%20and%20are%20accessible%20it%20is%20pretty%20strange.%20We%20had%20this%20issue%20for%20almost%20a%20year%20now%2C%20even%20before%20we%20implemented%20Zscaler.%3C%2FP%3E%3CP%3EIm%20not%20the%20only%20one%20getting%20this%20error%20either%2C%20since%20more%20and%20more%20users%20are%20complaining%20about%20it.%20Since%20EXO%20team%20closed%20the%20case%2C%20there%20is%20nothing%20much%20we%20can%20do.%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-34337%22%20slang%3D%22en-US%22%3ERe%3A%20Outlook%20-%20Certificate%20has%20been%20revoked%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-34337%22%20slang%3D%22en-US%22%3EHi%2C%3CBR%20%2F%3E%3CBR%20%2F%3EHave%20you%20verified%20that%20you%20can%20contact%20the%20CRL%20from%20within%20your%20network%20and%20that%20the%20certificate%20thumbprint%20of%20the%20cert%20you%20are%20getting%20the%20error%20with%20isn't%20in%20that%20list%3F%20I%20have%20seen%20issues%20like%20this%20normally%20for%20a%20couple%20of%20hours%20but%20nothing%20long%20term.%20Just%20off%20the%20top%20of%20my%20head%20it%20sounds%20like%20it%20could%20be%20some%20issue%20contacting%20the%20CRL%20or%20some%20sort%20of%20Proxy%20in%20the%20middle%20of%20your%20clients%20and%20Exchange%20Online%20which%20is%20doing%20something%20strange%20with%20certificates%3F%3CBR%20%2F%3E%3CBR%20%2F%3EMike%3C%2FLINGO-BODY%3E
leng 4ever
Contributor

Hi all,

 

not sure if anyone has experienced it, but we are getting tthis error multiple times a day when using outlook.

It says :

 

Outlook.office365.com

Information you Exchange with this site cannot be viewed or changed by others. However, there is a problem with the sites security certificate.

The security certificate for this site has been revoked,

This site should not be trusted,

 

If we dont click OK, outlook cannot send or receive emails. Sometime this window is hidden behind and therefor are not aware of it during the day.

 

if we click view certificate, it looks legit and everything seems to be ok. If enter OWA, we get same certificate(according to thumbprint), but there is no warning or error,

 

We have created a case with Exchange online team, but they say there are no error from their side and its internal network issue.

We have cleared certificate revoke list from our DNS servers without any help.

Any ideas on how to troubleshoot this further?

 

We use Outlook 2016 with latest updates and have all mailboxes in Exchange online.

I only have my archive mailbox attached to my outlook,

 

Thanks!

37 Replies
Hi,

Have you verified that you can contact the CRL from within your network and that the certificate thumbprint of the cert you are getting the error with isn't in that list? I have seen issues like this normally for a couple of hours but nothing long term. Just off the top of my head it sounds like it could be some issue contacting the CRL or some sort of Proxy in the middle of your clients and Exchange Online which is doing something strange with certificates?

Mike

Hi Mark,

 

yes we can access the urls fine and the certificate is not on revoke list.

We do use Zscaler for web filtering, but since the urls are not blocked and are accessible it is pretty strange. We had this issue for almost a year now, even before we implemented Zscaler.

Im not the only one getting this error either, since more and more users are complaining about it. Since EXO team closed the case, there is nothing much we can do.

Hi,

 

same Problem here. We are deploying a new Exchange Server 2016 and some Clients have this problem sometimes.

  • CA-ROOT is inside Trusted Root Certification Authorities
  • Internet Explorer shows everything as valid
  • CRL is reachable from inside and outside

Please help

 

br

Robert Skawinski

Has anyone found a solution to this?  I'm experiencing it with Exchange 2016 CU2 on-prem.

Is this issue causing for all the users or limited users? what is your outlook version? If this is happening only for outlook 2013, refer to the MS article to resolve this you need to install hotfix-

 

https://support.microsoft.com/en-us/help/3007582/certificate-error-message-when-you-start-outlook-

or-create-an-outlook-profile

 

Having the exact same issue here since upgrading to Outlook 2016 icw Exchange 2016 onprem. fyi we are using a Netscaler as a reverse proxy.

 

Has anyone found a fix for this?

This is not relevant. We are seeing a certificate revoked message when there is nothing wrong with the certificate. Also the message doesn't pop up when creating a profile, but during use of Outlook, about once or twice a day. Sometimes it doesn't popup for days.

Same issue. Exchange 2013, Load-balanced servers via Netscaler. Noticed after upgrading clients to 2016. Ticket open with MS support but their only solution is to disable the "Check for Publisher's Certificate Revocation" in IE which is not a real solution. 

Can you send me your support nr? I will create a premier support request today and can reference your ticket.

If you're having certificate warnings in Outlook for an on-prem Exchange deployment you should post a screenshot here so we can see exactly what the warning says. There's a number of potential problems and solutions for certificate issues.

Here is the error message (Office 365):

 

CertError.png

@Amir Jafarian that looks like either a problem communicating with the CRL or there might be another issue with your system or an intermediate network device (like a proxy). Since you are connecting to Exchange Online you can raise a support ticket with Microsoft for troubleshooting assistance. You can also try running diagnostics with the SARA tool (https://diagnostics.outlook.com).

 

Other posters are complaining of certificate popups for on-premises Exchange server environments, which could be an entirely different problem with their server or certificate configuration.

Hi,

 

We're experiencing the same issue as @Amir Jafarian 

 

Fully patched msi version of Outlook 2016. Connecting to Exchange online. Sporadic Digicert certificate warnings across the org. Seems to happen most commonly when waking a device from sleep. I'd agree it looks like issues checking the CRL but can't find the cause.

 

We've got tickets open with Microsoft and our proxy vendor but not getting anywhere fast. We've had our proxy solution in place for some time without issue and nothing has changed.

 

I'll post if we find anything.

[REG:117051515740234]

@James Chapman wrote:

can't find the cause.

 

our proxy solution


I'm not a betting man, but...

Thanks. I created a case as well and referenced yours. 

 

Found out something interesting. Everytime the revoked message appears, I have 2 Lync event in my application eventlog at exactly that timestamp:

 

Lync has enabled event logging.
Information about failed calls will be sent to the Windows event log.

 

and

 

LyncPlatform has enabled event logging.
Information about failed calls will be sent to the Windows event log.

 

Other than this, it seems totally random. Can stay away for weeks, then popup daily.

Just a quick note. We have the same issues, but no proxy in between. Doubt it is related to your (forward) proxy, or did you mean reverse?

Opened a 2nd ticket for Outlook since MS support always points fingers back and forth (117052515798731). Still getting no where and they've already quit trying to try and support the ticket since we are unable to reproduce the issue on command.

 

Note, we have tried applying the "workarounds" by suppressing the prompt in IE and Outlook (HKCU\software\policies\microsoft\office\16.0\outlook\security\usecrlchasing Value=2) but still doesn't seem to work. 

 

Only solution so far is to roll people back to Office 2013. 

Our case is also still open (REG:117052315783924). Not getting closer to a solution yet unfortunately. They keep asking for traces we cannot give as the issue can't be reproduced on demand. In the mean time I've supplied some dump files, but that didn't bring us any closer as well it seems... I'll update when we get more news from MS.

any news with this

Anyone found a solution for this issue. Microsoft support is of no help.

Update to Outlook 2016, if u already have it, do a online repair

Unfortunately not. MS was able to reproduce against our environment once, but hasn't occurred since. I haven't had the revoked popup since a month, so it might be that is has been resolved in an update. Are you still getting it with Outlook 2016 updated to the latest version?


@Javier Garcia wrote:

Opened a 2nd ticket for Outlook since MS support always points fingers back and forth (117052515798731). Still getting no where and they've already quit trying to try and support the ticket since we are unable to reproduce the issue on command.

 

Note, we have tried applying the "workarounds" by suppressing the prompt in IE and Outlook (HKCU\software\policies\microsoft\office\16.0\outlook\security\usecrlchasing Value=2) but still doesn't seem to work. 

 

Only solution so far is to roll people back to Office 2013. 


@Javier I got word you closed the case because you find the issue to be related to your reverse proxy, is this correct?


@®win . wrote:

@Javier Garcia wrote:

Opened a 2nd ticket for Outlook since MS support always points fingers back and forth (117052515798731). Still getting no where and they've already quit trying to try and support the ticket since we are unable to reproduce the issue on command.

 

Note, we have tried applying the "workarounds" by suppressing the prompt in IE and Outlook (HKCU\software\policies\microsoft\office\16.0\outlook\security\usecrlchasing Value=2) but still doesn't seem to work. 

 

Only solution so far is to roll people back to Office 2013. 


@Javier I got word you closed the case because you find the issue to be related to your reverse proxy, is this correct?


Thank you for the response. we opened a case and worked with MS support on the issue and they recommended  bypassing autodiscover by modifying the registry keys, however issue still persists. Issue only affects a couple of users. Will check to make sure they have the latest Office 2016 updates

and alos run an online full repair. We prefer not to downgrade to Office 2013.

Was resolution ever identified for this problem? I have the exact same issue with the exact same certificate.  I opened a case with Microsoft support but they have not been any help so far. 

 

No changes have been made to our network, the CRL isn't being blocked by anything, it doesn't contain the serial number of the certificate in question and the problem is intermittent.


@Jeffrey Baltezegar wrote:

Was resolution ever identified for this problem? I have the exact same issue with the exact same certificate.  I opened a case with Microsoft support but they have not been any help so far. 

 

No changes have been made to our network, the CRL isn't being blocked by anything, it doesn't contain the serial number of the certificate in question and the problem is intermittent.


Hello Jeffrey,

We have a case open with Microsoft, they requested for logs and they have escalated it, so far its a waiting game. Not sure of others.

Unfortunately the cause was never found. MS was able to reproduce it twice on their end but didn't get the required logging. After that it didn't occur anymore.

 

As we didn't change anything on our end, I had a suspicion they fixed it silently in one of their updates recently. Have you tried updating Outlook to the latest update?

Thank you for the response.  

 

I'll test updates to see if that helps.

Thanks for your update.  Are you seeing this problem intermittently as well?  I haven't been able to generate the message on-demand.

 

I had to call Microsoft twice yesterday just to get them to call back. When they did, the support "engineer" finally sounded as though she was taking this issue seriously.

 

I also contacted DigiCert support, who confirmed that the certificate is not revoked.


@Jeffrey Baltezegar wrote:

Thanks for your update.  Are you seeing this problem intermittently as well?  I haven't been able to generate the message on-demand.

 

I had to call Microsoft twice yesterday just to get them to call back. When they did, the support "engineer" finally sounded as though she was taking this issue seriously.

 

I also contacted DigiCert support, who confirmed that the certificate is not revoked.


Yes it was very intermittent. Sometimes every day and then not for a few weeks. I haven't had the error in more than two months now. Our casenr was 117052315783924, you can refer to that if you wish.

 

PS I just realized you didn't ask me but Jane. In any case extra info supplied.

Thank you for the info, I'm sure it will help out to have an established case for them to reference.

Was it solved after updates?

No it wasn't, we narrowed down the issue to be on the ISP side MTU size. Our clients that were affected both have the same internet service provider they made changes on their end and the issue has been resolved.

 

I keep getting the message outlook. Office365.Com has had its security certificate revoked. Is this true? What action should I take?

Just to add to my previous message I have now viewed the certificate and clicked on the tab titled Certification Path. This says: this certificate is okay.

Does that mean there is actually no problem and this is just a glitch?