Advice follows warning from Microsoft that an old certificate for allowing automatic Exchange mitigations is dead.