Microsoft 365 4.7.325
certificate-host-mismatch: Remote certificate MUST have a common name or subject alternative name that matches the hostname (DANE)
Microsoft 365 4.7.325 means: certificate-host-mismatch: Remote certificate MUST have a common name or subject alternative name that matches the hostname (DANE). It is a temporary failure, so your server retries it. The fix is in the sending or receiving configuration named above, not in the list. Fix that, then resend.
Microsoft 365’s exact wording
Quoted from Microsoft Learn: Email non-delivery reports and SMTP errors in Exchange Online, checked 2026-11-05. Placeholders are Microsoft 365’s own.
Provider's description
certificate-host-mismatch: Remote certificate MUST have a common name or subject alternative name that matches the hostname (DANE)
Possible cause
This error occurs if the presented certificate identities (CN and SAN) of a destination SMTP target host don't match any of the domains or MX host.
Provider's advice
This message usually indicates an issue on the destination email server. Check the validity of the recipient address and determine whether the destination server is configured correctly to receive messages.
| Who sends it | Microsoft 365, Exchange Online and Outlook.com |
|---|---|
| Basic code | Microsoft 365 lists the enhanced code only |
| Enhanced code | 4.7.325: Microsoft 365-specific, not in the IANA registry. Its subject digit puts it under 5.7.0 other or undefined security status. |
| Permanent or temporary | Temporary (4xx) |
| Verifying the list prevents it | No |
What the sender should do
The fix is in the sending or receiving configuration named above, not in the list. Fix that, then resend.
Would verifying the list have prevented Microsoft 365 4.7.325?
No
This reply is about your sending setup, the message or the receiving system, not about whether the address exists, so verifying the list will not prevent it.
Common questions
- What does Microsoft 365 4.7.325 mean?
- Microsoft 365 4.7.325 means: certificate-host-mismatch: Remote certificate MUST have a common name or subject alternative name that matches the hostname (DANE). It is a temporary failure, so your server retries it. The fix is in the sending or receiving configuration named above, not in the list. Fix that, then resend.
- Should I retry after Microsoft 365 4.7.325?
- Your sending server retries it automatically, because it is a temporary (4xx) failure. Investigate only if it keeps coming back over several hours.
- Would verifying my list have prevented Microsoft 365 4.7.325?
- No. This reply is about your sending setup, the message or the receiving system, not about whether the address exists, so verifying the list will not prevent it.
Sources
- Microsoft Learn: Email non-delivery reports and SMTP errors in Exchange Online (checked 2026-11-05)
Registry and provider wording is quoted exactly; guidance is written by the SimpleVerifier Team.
SimpleVerifier Team · Last checked against the sources 2026-11-05