'%3e%3cpath%20d='M8%200C12.4183%200%2016%203.58172%2016%208C16%2012.4183%2012.4183%2016%208%2016C3.58172%2016%200%2012.4183%200%208C0%203.58172%203.58172%200%208%200ZM11.6162%204.38379C11.2257%203.99337%2010.5927%203.99338%2010.2021%204.38379L8%206.58594L5.79785%204.38379C5.40732%203.99334%204.77429%203.99329%204.38379%204.38379C3.99331%204.77429%203.99335%205.40733%204.38379%205.79785L6.58594%208L4.38379%2010.2021C3.99348%2010.5927%203.99341%2011.2257%204.38379%2011.6162C4.77426%2012.0066%205.40734%2012.0065%205.79785%2011.6162L8%209.41406L10.2021%2011.6162C10.5927%2012.0066%2011.2257%2012.0067%2011.6162%2011.6162C12.0067%2011.2257%2012.0066%2010.5927%2011.6162%2010.2021L9.41406%208L11.6162%205.79785C12.0066%205.40735%2012.0066%204.77429%2011.6162%204.38379Z'%20fill='%23080E17'%20fill-opacity='0.46'/%3e%3c/g%3e%3cdefs%3e%3cclipPath%20id='clip0_3761_713'%3e%3crect%20width='16'%20height='16'%20fill='white'/%3e%3c/clipPath%3e%3c/defs%3e%3c/svg%3e)
How to Fix Browser Certificate Errors After Adding Microsoft 365 DNS Records
Question details
Users experience browser SSL certificate errors when attempting to access their website domain after adding Microsoft 365 DNS records.
- Product
- Microsoft 365
- Device & OS
- not provided
- Scenario
- Configuring custom domain DNS records for Microsoft 365 services.
- Observed behavior
- Web browsers display security or certificate errors when visitors attempt to access the website associated with the domain.
Ensure you have administrative access to your domain registrar's DNS management panel and your website's hosting control panel before troubleshooting.
Verify and Reinstall the SSL Certificate via Hosting Provider
Certificate errors usually happen because the website's SSL certificate is missing, expired, or improperly bound to the new DNS configuration.
When DNS records are modified, it can sometimes affect how the domain routes traffic to your web host. Ensuring your host has a valid SSL certificate applied to the correct IP address is the most common fix.
Reach out to your website hosting provider or domain registrar's support team for assistance.
Ask the support team to verify if a valid SSL certificate is installed and correctly configured for your root domain and the 'www' subdomain.
If the certificate is missing or invalid, use your hosting control panel (like cPanel or Plesk) to issue a new free Let's Encrypt certificate or reinstall your custom SSL.
Review Microsoft 365 DNS Records for Conflicts
Ensure that your website's A records and CNAME records were not accidentally overwritten by Microsoft 365 email or service records.
Contact Microsoft 365 Support
If your DNS and SSL are configured correctly but the issue persists, escalate the problem to Microsoft support.
Try WPS Office: A Lightweight and Free Alternative
While domain and DNS configurations are managed externally, handling your business documents doesn't have to be complicated. WPS Office provides a seamless, free, and highly compatible alternative to Microsoft Office for your daily productivity needs.
- 1. Download WPS Office: Visit the official WPS website and download the free installation package for your operating system.
- 2. Install the software: Run the downloaded installer and follow the quick on-screen instructions to complete the setup.
- 3. Open your documents: Launch WPS Office and open your existing Microsoft Office files directly with perfect formatting.
Frequently Asked Questions
Why do Microsoft 365 DNS records affect my website's SSL?
Microsoft 365 DNS records (like MX and TXT) handle email routing and domain verification. However, if you accidentally modify or delete your website's A record or CNAME record during this process, your domain might point to a server that doesn't have your SSL certificate, which triggers browser security errors.
How long does it take for DNS and SSL changes to take effect?
DNS propagation typically takes anywhere from a few minutes to 48 hours globally. Once the DNS correctly points to your hosting server, a properly configured SSL certificate should instantly secure the connection.
Can I use Microsoft 365 for email while hosting my website elsewhere?
Yes. You simply need to point your MX and specific TXT/CNAME records to Microsoft 365 for email services, while ensuring your domain's A record remains pointing to your third-party website hosting provider.
What should I do if my SSL certificate has actually expired?
You need to log into your web hosting control panel and renew the SSL certificate. Many hosting providers offer free, auto-renewing Let's Encrypt certificates that you can enable with a single click in your domain settings.
