Microsoft site throwing warnings after someone forgot to renew cert
Jump to main content
Search
REG AD
Security
Microsoft site throwing warnings after someone forgot to renew cert
Connectivity checker trips browser alarms thanks to lapsed security paperwork
Connor Jones
Connor<br>Jones
Cybersecurity reporter
Published<br>mon 15 Jun 2026 // 16:33 UTC
Microsoft appears to have dropped the ball with its certificate management after a domain used by sysadmins worldwide to test connectivity to Microsoft 365 started throwing untrusted connection warnings in browsers.<br>The connectivity.office.com domain is used by IT pros to test their network's connectivity to Microsoft 365 and ensure their firewalls aren't blocking anything that could affect an organization's access to Microsoft servers.<br>An SSL server report retrieved on Monday showed that the certificate expired on June 14 after last being renewed on December 16, 2025.
REG AD
At the time of writing, 35 hours have passed since the certificate expired, and Microsoft has still not renewed it, despite many in the IT community making their opinions on the matter known.
REG AD
Certificate renewals are often automated in this day and age, but in organizations still relying on manual processes, those responsible for renewals would almost certainly have received multiple alerts warning of the impending expiration.<br>It suggests that something, or someone, involved in the certificate-renewal process at Microsoft has messed up.<br>The Register contacted Redmond for a response. The company's publicists acknowledged the request for comment but did not return one in time for publication.
MORE CONTEXT
New SSL/TLS certs to each live no longer than 47 days by 2029
Microsoft Teams starts February with a good, old-fashioned TITSUP*
Typhoon-like gang slinging TLS certificate 'signed' by the Los Angeles Police Department
DigiCert gives unlucky folks 24 hours to replace doomed certificates after code blunder
The fallout could have been much worse. Browser warnings on a network diagnostic tool are irritating, but hardly catastrophic compared with the same thing happening to login.microsoft.com or another critical service.<br>Teams users may remember the collaboration platform abruptly deciding to take Monday off in 2020, after an authentication certificate expired, for example.<br>Whatever went wrong here, Microsoft will have to tighten its processes before shorter certificate lifespans arrive in the coming years.<br>As of March 26, new SSL/TLS certs will have a maximum lifespan of 200 days. This is set to decrease to 100 days by March 15, 2027, and then to 47 days two years later. ®
microsoft<br>certificate expiration<br>microsoft 365<br>security<br>tls certificate
REG AD
offbeat
The Y2K bug is back! Danish dev digs up untimely flaw in old BSD build
26 years late and no threat unless you still run a PDP-11/70 and rely on short-wave timekeeping broadcasts
SCIENCE
NASA management wants a word and won't say why
A mystery calendar event is certainly one way to find out about being selected for the Artemis III crew
Europe's AI paralysis has a solution - and it starts with a semantic twin
PARTNER CONTENT: Onix's Wingspan platform promises to move enterprises from pilot purgatory to governed, enterprise-wide AI deployment in weeks, not years
SOFTWARE
Red Hat gives Ubuntu a bootc up the backside at Canonical shindig
Bootable containers pitch shows how distro can be managed with familiar OCI tooling
PAAS AND IAAS
Graviton 5 impresses, but please, for the love of all that's holy, stop calling them 'AI chips'
AWS better at running chip fabs than their mouths
Security
Microsoft site throwing warnings after someone forgot to renew cert
Connectivity checker trips browser alarms thanks to lapsed security paperwork
MOST POPULAR
security
GitHub nukes 70+ Microsoft repos, breaks CI/CD pipelines, following suspected worm infections
Security
Angry bug hunter with Microsoft beef drops new Windows 0-day
ON-PREM
Amazon owns up to using 2.5bn gallons of H2O in its bit barns last year
Security
Signal says UK plan to scan devices for nude images 'endangers us all'
SECURITY
Every employee’s password was stored in a single Excel file
EVENTS
Thriving Through Volatility: The Everpure Advantage in an Uncertain Market
Learn how a consumption-based operating model provides flexibility, improves efficiency, and brings predictability to infrastructure investments.
From Prompt to Exploit: How LLMs Are Changing API Attacks
Modern applications are API-driven, interconnected, and often over-permissioned, making them an ideal target for AI-assisted attacks.
Architecting the Future: Unlocking Enterprise Data Services for Kubernetes
Join us to discover how to eliminate infrastructure silos and establish a standardized, enterprise-grade cloud-native platform.
Catch the Advanced Attacks Microsoft 365 Misses with Behavioral AI Security
Microsoft 365 is the backbone of enterprise communication, and...