Menu
Reply
TJH-L
  • 17
  • 0
  • 1
Tuning in
334 Views
Message 21 of 61
Flag for a moderator

Re: Outlook Security Certificate issue

Hi Tim,

As requested:

NS Name=email.virginmedia.com
DNS Name=webmail.virginmedia.com
DNS Name=mail.virginmedia.com
DNS Name=mail2.virginmedia.com
DNS Name=mail3.virginmedia.com
DNS Name=pop.virginmedia.com
DNS Name=pop3.virginmedia.com
DNS Name=imap.virginmedia.com
DNS Name=imap4.virginmedia.com
DNS Name=smtp.virginmedia.com
DNS Name=autoconfig.virginmedia.com
DNS Name=autodiscover.virginmedia.com

用心棒
  • 5.64K
  • 634
  • 1.97K
Very Insightful Person
Very Insightful Person
313 Views
Message 22 of 61
Flag for a moderator

Re: Outlook Security Certificate issue

Those (12) entries correspond with what I see in the certificate. Further down from Subject Alternative Names appears Thumbprint, can you post its value here.

The same certificate that fails validity in Outlook is used in webmail. Are you able to sign into webmail?

ha222
  • 21
  • 0
  • 0
Joining in
308 Views
Message 23 of 61
Flag for a moderator

Re: Outlook Security Certificate issue

c05e21fa19ebc1efa3677d8e5f92d75b8b3e6be1

0 Kudos
Reply
用心棒
  • 5.64K
  • 634
  • 1.97K
Very Insightful Person
Very Insightful Person
297 Views
Message 24 of 61
Flag for a moderator

Re: Outlook Security Certificate issue

Thumbprint matches with what I see to. Can you select the Certification Path tab and post a screenshot of it here.

Were you able to sign into webmail?

ha222
  • 21
  • 0
  • 0
Joining in
269 Views
Message 25 of 61
Flag for a moderator

Re: Outlook Security Certificate issue

Attached! I use Outlook and have no problem signing in once I say yes to 'Do you want to continue using this server' (ie VM whosepopup5.jpg certificate can not be verified)

0 Kudos
Reply
TJH-L
  • 17
  • 0
  • 1
Tuning in
251 Views
Message 26 of 61
Flag for a moderator

Re: Outlook Security Certificate issue

Tim,

Thumbprint: db66c99f4f3cdb13fc2f26dd3a96c56f3ce5de16

 

0 Kudos
Reply
TJH-L
  • 17
  • 0
  • 1
Tuning in
249 Views
Message 27 of 61
Flag for a moderator

Re: Outlook Security Certificate issue

Tim,

Certification...

TJH-L_0-1613849287184.png

 

0 Kudos
Reply
ravenstar68
  • 18.7K
  • 1.09K
  • 8.06K
Very Insightful Person
Very Insightful Person
230 Views
Message 28 of 61
Flag for a moderator

Re: Outlook Security Certificate issue

Well that's definitely not the correct certificate.  ALTHOUGH I did uninstall Norton and install AVG myself.  I got similar to yourself in terms of the certificate BUT in my case the connection to imap.virginmedia.com on port 993 still worked with no issues.

Whatever is going on, it's not an issue with the certificate itself..

I've seen one possible fix for this issue mentioned BUT:

1.  It wouldn't be an option on Virgin Media's system.
2.  You shouldn't need to do it anyway.

Based on the error message the client doesn't seem to be using the SAN list correctly and only authenticating using the CN (Common Name) on the certificate however this is just supposition on my part.

I've tested this server with Outlook 365, sTunnel, and OpenSSL's s_client tool and for me it's working on each.

I'm a Very Insightful Person, I'm here to share knowledge, I don't work for Virgin Media. Learn more

Have I helped? Click Mark as Helpful Answer or use Kudos to say thanks

0 Kudos
Reply
ha222
  • 21
  • 0
  • 0
Joining in
206 Views
Message 29 of 61
Flag for a moderator

Re: Outlook Security Certificate issue

So what is the way forward - how to resolve the problem of the certificate verification?

0 Kudos
Reply
用心棒
  • 5.64K
  • 634
  • 1.97K
Very Insightful Person
Very Insightful Person
143 Views
Message 30 of 61
Flag for a moderator

Re: Outlook Security Certificate issue

Way forward…

  • use an up to date email client; Microsoft ceased supporting Outlook 2007 as of 10 October 2017
  • continue manually accepting the certificate

BTW: I agree with @ravenstar68 that the likely cause is incorrect processing of the Subject Alternative Name (SAN). Not sure why the issue was not occurring earlier other than maybe a recent update to Windows 10.

0 Kudos
Reply