Hi Nathan,
You're right. For Microsoft-managed environments, SSL certificates are normally renewed automatically by the platform. If the certificate expired and wasn’t renewed, it usually indicates a service-side issue. Common causes include:
- A stuck certificate rotation job in Lifecycle Services (LCS).
- The environment being in a Stopped or failed state.
- Rare backend provisioning delays.
You can check out these recommendations:
Rotate SSL Certificate via LCS
- Sign in to Lifecycle Services (LCS).
- Go to your environment → Maintain → Rotate secrets → Rotate SSL Certificates.
- Confirm and monitor the servicing operation (usually completes in 10–15 minutes).
If Rotation Option is Missing or Fails
- Ensure the environment is in Deployed state.
- If the option is unavailable or the job fails, capture the error details and open a Microsoft support ticket, as this indicates a backend issue.
Reference:
Since this looks more like a Dynamics 365 environment management issue rather than IIS. To save time and make sure the right experts see your question, I'd recommend you could edit the tag or create a new thread with a different tag (example: Microsoft 365 and Office).
I hope this helps!