Since root SSL certificate expired on May, 30, I am unable to fetch any email from my corporate Microsoft Exchange server using evolution email client, and the error message says just that ssl certificate is not valid, which is perfectly reasonable. Internal IT service says that everything works fine and they are not going to investigate the problem. Indeed, outlook web interface has no problems.
Public SSL certificate checkers (https://ssltools.godaddy.com/views/certChecker, https://www.sslchecker.com/sslchecker) generally agree with me and state that one of the certificates in the chain is invalid.
I'm not expert in ssl certificate chain and the question is what can really fix the problem?
Do I have the certificates that are too old, or the server provides my email client with outdated certificate chain, or there may be some other source?
At the end of the day, should I push IT department stronger, or find a problem in my system configuration, or file a bug to my email client developers?
OS: Arch Linux
with the following packages installed:
evolution 3.36.3
ca-certificates 20181109-3
ca-certificates-mozilla 3.53-1
No other services seem to be affected. Any help is appreciated.
EDIT:
Detailed technical description: https://support.sectigo.com/articles/Knowledge/Sectigo-AddTrust-External-CA-Root-Expiring-May-30-2020
Expired certificate, according to https://ssltools.godaddy.com/views/certChecker
Serial Number: 2766EE56EB49F38EABD770A2FC84DE22
Signature Algorithm: Sha384 With RSA Encryption
Issuer Name: AddTrust AB
Common Name: COMODO RSA Certification Authority
Validity Period: May 30, 2000 to May 30, 2020
At the end of the day, should I push IT department stronger, or find a problem in my system configuration, or file a bug to my email client developers?