AskTechGurus Get help now →

Email & Exchange Server

Outlook can't connect after an Exchange certificate expired

Outlook and webmail stop connecting after the SSL/TLS certificate bound to Exchange expires.

What you’re seeing

  • Outlook shows Disconnected or Trying to connect for everyone, starting on the same day.
  • A security alert in Outlook saying the certificate's date is invalid or has expired.
  • Browsers warn that the connection is not private when staff open webmail.
  • Phones and tablets stop syncing email and calendars.

Common causes

Every environment is different, but these are the causes our engineers find most often:

  • The public SSL/TLS certificate assigned to Exchange's web services reached its expiry date without being renewed.
  • A renewed certificate was imported but never assigned to Exchange, so the server keeps presenting the expired one.
  • A load balancer, firewall or reverse proxy in front of Exchange still holds the expired certificate even though the server itself was updated.
  • Renewal reminders went to a former employee or an unmonitored mailbox, so nobody saw them.
  • An automatic renewal failed quietly because domain ownership could not be validated.

Why it matters

An expired certificate takes down every way staff connect to Exchange at once: desktop Outlook, webmail, and mobile devices. Because it happens on a fixed date, it often lands with no warning to the people affected, and help-desk lines fill with identical complaints. Users who click through certificate warnings to keep working are also being trained to ignore real security alerts, which raises the risk of falling for an interception or phishing attack later.

How AskTechGurus fixes it

Skip the trial and error. A certified engineer works on your actual system, finds the root cause, and fixes it properly.

Tell us what’s happening

Submit a ticket in about two minutes. Paste the error, describe what changed, and pick your tier. No charge to submit.

A certified engineer diagnoses it

A vetted, US-based systems engineer claims your ticket, usually within minutes during business hours, and investigates over a secure remote session you can watch and end at any time.

Fixed and verified with you

The engineer resolves the root cause and confirms with you that it’s working. You don’t just get a workaround, and you get a plain-English summary of what was wrong.

Pay only when it’s resolved

Fixed price from $99, invoiced only after you approve the fix. If it isn’t resolved, you don’t pay.

Frequently asked questions

Is our email data at risk?

No. The mailboxes and their contents are untouched; the certificate only protects the connection to the server. Once a valid certificate is in place, Outlook reconnects and catches up.

Why did it break for everyone at the same moment?

Certificates have a hard expiry date and time, and every client checks it on each connection. Once that moment passes, all devices reject the server together.

How do we avoid a repeat next year?

Our plain-English summary records the new certificate's expiry date and where it is used, so you can put a renewal reminder on a calendar that someone actually watches.

Still stuck? Let a pro take it from here.

AskTechGurus connects you with vetted, US-based systems engineers who fix this every day. No call centers, no scripts, no surprise bills.

Start now →