X
Tap here to go to the mobile version of the site.

Support Forum

How to see server certificate?

Posted

Hello,

How can I see the certificate for the email servers (imap, pop, smtp)? I don't see anything in the account settings. Am I missing something?

Thank you!

Hello, How can I see the certificate for the email servers (imap, pop, smtp)? I don't see anything in the account settings. Am I missing something? Thank you!

Additional System Details

Application

  • User Agent: Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:57.0) Gecko/20100101 Firefox/57.0

More Information

Zenos 2265 solutions 12258 answers

Tools|Options|Advanced|Certificates

[http://kb.mozillazine.org/Menu_differences_in_Windows%2C_Linux%2C_and_Mac Tools|Options|]Advanced|Certificates

Modified by Zenos

Question owner

I went there and I clicked on "Manage certificates". All I can see are expired certificates and not even one from my mail servers.

I went there and I clicked on "Manage certificates". All I can see are expired certificates and not even one from my mail servers.
christ1
  • Top 25 Contributor
2176 solutions 15945 answers
Am I missing something?

No. I don't think you can check the actual server cert with Thunderbird, unless there is an error. In that case you do get an exception prompt, and can inspect the problematic cert.

You may look for an extension on AMO giving you access to the server certs. https://addons.mozilla.org/thunderbird/

Beyond that see https://support.mozilla.org/en-US/questions/1116781

<blockquote> Am I missing something? </blockquote> No. I don't think you can check the actual server cert with Thunderbird, unless there is an error. In that case you do get an exception prompt, and can inspect the problematic cert. You may look for an extension on AMO giving you access to the server certs. https://addons.mozilla.org/thunderbird/ Beyond that see https://support.mozilla.org/en-US/questions/1116781

Question owner

Unfortunately, I did not find any extension doing it. It seems people are asking for such feature since 2007.

Unfortunately, I did not find any extension doing it. It seems people are asking for such feature since 2007.
Matt
  • Top 10 Contributor
  • Moderator
3291 solutions 22731 answers

I am curious, why would you want to actually view the certificate offered?

If I wish to "test" a server I use this site https://www.htbridge.com/ssl/

I am curious, why would you want to actually view the certificate offered? If I wish to "test" a server I use this site https://www.htbridge.com/ssl/

Helpful Reply

Yes, I'm using this website :) but it takes time as it check many things (cipher suites, and so on) and fails in some cases.

I see many reasons: To check until when the certificate is valid, if it changed, what is the CA, the fingerprints, the object, the alternative names, the encryption algorithm, the key length, etc.

Thunderbird is checking it each times anyway when initiate TLS or StartTLS connections, so I'd like to be able to see it.

With Firefox, It takes 4 clicks to view the certificate. I use it all the time to (double) check if the new certificate was properly take into account. I would like to be able to do the same with Thunderbird.

Yes, I'm using this website :) but it takes time as it check many things (cipher suites, and so on) and fails in some cases. I see many reasons: To check until when the certificate is valid, if it changed, what is the CA, the fingerprints, the object, the alternative names, the encryption algorithm, the key length, etc. Thunderbird is checking it each times anyway when initiate TLS or StartTLS connections, so I'd like to be able to see it. With Firefox, It takes 4 clicks to view the certificate. I use it all the time to (double) check if the new certificate was properly take into account. I would like to be able to do the same with Thunderbird.

Modified by Analogue

BatManuel 1 solutions 26 answers

Helpful Reply

I have the same issue, I spent way too much time looking for this and to be honest, I am surprised that it's not possible. I had to resort to using openssl to view the certificate.

It's really bad that everything security is being gradually hidden from the users.

I have the same issue, I spent way too much time looking for this and to be honest, I am surprised that it's not possible. I had to resort to using openssl to view the certificate. It's really bad that everything security is being gradually hidden from the users.