This browser is no longer supported.
Upgrade to Microsoft Edge to take advantage of the latest features, security updates, and technical support.
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(316.8, 56.00000000000001%, 40%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3ERR%3C/text%3E%3C/svg%3E)
After running the Microsoft Remote Connectivity Analyzer, we received a connectivity test fail while testing the certificate:
Testing the SSL certificate to make sure it's valid.
The SSL certificate failed one or more certificate validation checks.
Certificate trust is being validated.
Certificate trust validation failed.
The Microsoft Connectivity Analyzer is attempting to build certificate chains for certificate CN=...
A certificate chain couldn't be constructed for the certificate.
Additional Details
The certificate chain has errors. Chain status = NotTimeValid.
Any idea on how to fix this?
Federated identity management using Active Directory Federation Services
Hello,
Is that certificate expired?
Thanks,
Manu
Answer accepted by question author
We had a certificate expire a few months ago, and we replaced it on the ad fs servers.
The one we are using right now should be valid until 2022.
Is is possible the Exchange online is still using the old one?
Hi,
Please check Using Powershell
Get-MsolFederationProperty -DomainName "your domain name"
If it shows expired certificate, you can update it as follows:
Update-MsolFederatedDomain –DomainName "your domain name"
And check again with the first cmdlet
Please mark as "Accept the answer" if the above steps helps you. Others with similar issues can also follow the solution as per your suggestion
Regards,
Manu
Hello again Manu, thanks for your reply!
after executing the command on our server, the certificate it shows us seems to be valid.
J will attach the result here, without the domain9005-powershell.txt
was the result corret?
Thanks for the help so far.
Rodrigo
Hello Rodrigo,
Thanks for providing more details. Looks like you need to update the new certificate for service connections
Following steps should resolve the issue
Please mark as "Accept the answer" if the above steps helps you. Others with similar issues can also follow the solution as per your suggestion
Regards,
Manu
Hello!
That, along with your first command. fixed the problem we were having.
we still got the error on the conectivity analyzer, but our users can now log onto the outlook 365
Thanks for the help!