Advice follows warning from Microsoft that an old certificate for allowing automatic Exchange mitigations is dead.
The vulnerability, nicknamed ProxyLogon, was disclosed by Microsoft in 2021, and a patch has been available for 4 years.