Windows 10 will reach EOS (end of support) on October 14, 2025. For more information, see this article.

Search Support

Avoid support scams. We will never ask you to call or text a phone number or share personal information. Please report suspicious activity using the “Report Abuse” option.

Learn More

Certificate for IMAP Gmail does not come from a trusted source

  • 9 replies
  • 1 has this problem
  • 8 views
  • Last reply by christ1

more options

I have suddenly started to receive this message when I open Thunderbird "Certificate for IMAP Gmail does not come from a trusted source". When I click on this message I get the attached screenshot.

I've gone through the forums by I can't understand what it is written. It seems like everything that is written is designed for people who have a good understanding of technology. I don't but I was able to determine that the OAuth is properly set.

I am using 128.14.0esr (64-bit) Thunderbird for Linux Mint mint-001 - 1.0 Updates disabled by system administrator Currently on the esr update channel

I have suddenly started to receive this message when I open Thunderbird "Certificate for IMAP Gmail does not come from a trusted source". When I click on this message I get the attached screenshot. I've gone through the forums by I can't understand what it is written. It seems like everything that is written is designed for people who have a good understanding of technology. I don't but I was able to determine that the OAuth is properly set. I am using 128.14.0esr (64-bit) Thunderbird for Linux Mint mint-001 - 1.0 Updates disabled by system administrator Currently on the esr update channel
Attached screenshots

All Replies (9)

more options

Are you running some sort of anti-virus software?

Helpful?

more options

Nope. I do use a VPN, but I have been using it for years. This message just started appearing.

Helpful?

more options

what happens when you click get certificate. Can you view it?

Helpful?

more options

I just tried. Nothing happened. Well I can see that there is a reaction that it indicates it was clicked (not like a dead link) but nothing else is shown. The box just remains there.

I've also received a notice that an update to the OS is available. Maybe I'll do that and see what happens.

Helpful?

more options

Contact Your System Administrator

You mentioned that updates are disabled by your system administrator. This is the most likely cause of your problem.

Thunderbird and other browsers constantly get security updates to recognize new, trusted certificates.

Your version of Thunderbird may be too old to recognize the most recent security certificate that Google is using.

The best solution is to contact the person who manages your computer (your system administrator) and ask them to update Thunderbird to the latest version. This will fix the problem and keep you secure.

Helpful?

more options
I do use a VPN, but I have been using it for years. This message just started appearing.

Does it work without the VPN?

Helpful?

more options

George Kitsoukakis said

Contact Your System Administrator You mentioned that updates are disabled by your system administrator. This is the most likely cause of your problem. Thunderbird and other browsers constantly get security updates to recognize new, trusted certificates. Your version of Thunderbird may be too old to recognize the most recent security certificate that Google is using. The best solution is to contact the person who manages your computer (your system administrator) and ask them to update Thunderbird to the latest version. This will fix the problem and keep you secure.

Thanks for the reply.

I'm the system administrator. Not sure why it says I disabled updates but I regularly get a whole host of updates which don't get installed until I click on the update and allow the installation. But I have the latest version of Thunderbird as listed on the website, released on August 19, 2025. So I don't think that's it.

Helpful?

more options

Many antivirus and security suites include a feature called SSL/TLS inspection or Secure Connection Scanning. Since this certificate is from your security software and not from Gmail, Thunderbird correctly flags it as untrusted.

1. Check the settings of your security suite.

Look for a feature with names like "Enable SSL scanning," "Secure Connection Scanning," or "Web Shield."

Disable this feature for Thunderbird only or add an explicit exception for Thunderbird in your antivirus settings.

2. System-Level Certificate Store Issues

The problem may not be with Thunderbird's certificate store but with your operating system's, may not have the root certificates required to validate Google's certificate chain.

You can use a command-line tool to check the certificate being served by Gmail's server. This will show you exactly what Thunderbird is seeing.

On a Linux system, open a terminal and run the following command to see the certificate chain:

openssl s_client -connect imap.gmail.com:993 -showcerts

Examine the output to see if the full certificate chain is present and if any of the certificates are flagged as expired or invalid.

Helpful?

more options
Thunderbird for Linux Mint mint-001 - 1.0 Updates disabled by system administrator

My best guess would be you're using the Thunderbird package provided by your distribution. Then the 'Updates disabled' notification would be the expected behavior.

You mentioned that updates are disabled by your system administrator. This is the most likely cause of your problem.

I'd argue it isn't.

Many antivirus and security suites include a feature called SSL/TLS inspection or Secure Connection Scanning.

The OP is running Linux, and already stated they are not running an anti-virus software.

Since this certificate is from your security software and not from Gmail, Thunderbird correctly flags it as untrusted.

How do you determine the cert is from a security software the OP is (not) running?

Modified by christ1

Helpful?

Ask a question

You must log in to your account to reply to posts. Please start a new question, if you do not have an account yet.