I have a point to site vpn setup that worked last week. Over the weekend it stopped working. It looks like Azure no longer recognizes the root certificate used to issue certificates to connecting clients, but the root and client certs are valid.
The error I'm getting (in the windows ras dialer) is "Error 853: The remote access connection completed, but authentication failed because the certificate that authenticates the client to the server is not valid. Ensure that the certificate used for authentication is valid."
This started affecting all clients/certificates at the same time.