FWIW the solution is to disable OCSP support in Firefox. Not exactly best practice security-wise (how are you going to know the certificate is revoked?), but will let you access the problematic Microsoft sites again.

Go to "about:config" Change security.ssl.enable_ocsp_stapling to false.