The certificate used for the Exchange Online Settings within the Email Settings modules is expired and a new one is needed:
The steps below will create a new self-signed certificate than can be assigned to the Active Administrator server and the Azure registered application:
# Create a new self-signed certificate in the CurrentUser store
$cert = New-SelfSignedCertificate `
-CertStoreLocation "Cert:\CurrentUser\My" `
-Subject "CN=MyAppCert" `
-KeyExportPolicy Exportable `
-KeySpec Signature `
-NotAfter (Get-Date).AddYears(1)
# Define a password for the PFX export
$pwd = ConvertTo-SecureString -String "Password" -Force -AsPlainText
# Export the certificate with private key (.PFX) to C:\Temp
Export-PfxCertificate -Cert $cert `
-FilePath "C:\Temp\ExchangeOnlineApp.pfx" `
-Password $pwd
# Export the public key only (.CER) to C:\Temp
Export-Certificate -Cert $cert `
-FilePath "C:\Temp\ExchangeOnlineApp.cer"