Avatar for Username

Search Support

Avoid support scams. We will never ask you to call or text a phone number or share personal information. Please report suspicious activity using the “Report Abuse” option.

Learn More

This thread was archived. Please ask a new question if you need help.

DST Root CA X3 certificate after 30 september 2021

  • 2 replies
  • 1 has this problem
  • 1 view
  • Last reply by Matt

zygdresze1
zygdresze1
more options

Hello. I have an issue checking mail due to expired root certificate DST Root CA X3. The version of Thunderbird is quite old, but i appreciate its current functionality and don't feel urge to upgrade it to newest version. Mentioned root certificate is used to confirm Lets Encrypt certificate mail server is using. I installed ISRG Root X1 self signed, Lets Encrypt R3 and IdenTrust Commercial Root CA 1 (which is replacement for DST one) in my Windows 7, but Thunderbird still looks at DST Root CA X3 checking mails. This certificate is inside NSS Thunderbird base flagged as builtin object and can't be removed. Seems like Thunderbid doesn't care I have newer proper certificates in system. Can I somehow fix the certificate issue without upgrading TB to newest version?

Hello. I have an issue checking mail due to expired root certificate DST Root CA X3. The version of Thunderbird is quite old, but i appreciate its current functionality and don't feel urge to upgrade it to newest version. Mentioned root certificate is used to confirm Lets Encrypt certificate mail server is using. I installed ISRG Root X1 self signed, Lets Encrypt R3 and IdenTrust Commercial Root CA 1 (which is replacement for DST one) in my Windows 7, but Thunderbird still looks at DST Root CA X3 checking mails. This certificate is inside NSS Thunderbird base flagged as builtin object and can't be removed. Seems like Thunderbid doesn't care I have newer proper certificates in system. Can I somehow fix the certificate issue without upgrading TB to newest version?

All Replies (2)

zygdresze1
zygdresze1 Question owner
more options

Seems i was able to resolve the issue - I just needed to add ISRG certificate directly in Thunderbird base of certificates, not in Windows base. Well, few hours passed ...

Matt
Matt
  • Moderator
  • Top 10 Contributor
more options

if you used a current version they the update would be managed for you, so really if you felt inconvenienced it was through your own choice. Only the current release version is supported with patches.