Форум спільноти Thunderbird

Hi, With new version 1.143 all accounts are gone, need to re-create my existing mails accoutns (outlook, yahoo, gmail) but all fail on error message "www.mozilla.org uses an invalid security certificate" How to resolve ? Grtz, Jane

Thunderbird 140.7.0esr allows me to e-mail my OpenPGP public key to myself, but it doesn't seem to have any way for me to get access to my private key. I was wondering how to export keys? Thanks!

Hi. I'm using Thunderbird for my POP account and it has stopped sending messages. It just says, Sending of the message failed. Peer's certificate has expired. The configuration related to (my server name) must be corrected. What am I to do?

Hello, My SMTP server uses Let's Encrypt certificate. The website with the same domain has no certificate. Thunderbird refuses to connect to my SMTP server. Test connection to the server (STARTTLS) in account settings sais "The secure connection to the server failed" (or similar. I see bg localization). Another server with Let's Encrypt certificate. Test pases. Clicking View certificate shows webserver cert (from DigiCert Inc).

I can't send emails! :)

Regards! Valentin

I keep getting a certificate error on my Thunderbird. The certificate refers to an email account i no longer have (Personal domain) and i have removed the account in thunderbird, and also removed previous certificate exceptions.

I have been through all menus and settings, and cannot find anywhere where it refers to that domain (and subdomain) I have also removed one entry with that FQDN in the outgoing server section.

What to do?

While debugging issues related to a self-signed certificate, I came across the Certificate Manager pop-up. This can be accessed in the Settings, under Privacy & Security, by clicking on the Manage Certificates button.

The Servers tab had a button for 'Add Exception'. I tried to add an exception, but it wasn't clear how this is supposed to work. I tried entering a location in form that is shown by existing exceptions and clicking on the Get Certificate button, but this resulted in a response of "No Information Available ... Unable to obtain identification status for this site." Is there any documentation or hints on how this is supposed to work?

On Monday, 17 November 2025 the Security Certificate expired and I stopped receiving emails both on my computer and Andriod Device. As a result I am not receiving any emails through Thunderbird, but I can go to email host site to view them.

I logged in my computer tonight and clicked here and clicked there and the error message: "The certificate for mail.homebizmall.net is not valid for that server. Someone could be trying to impersonate the server. Create an exception but this could mean that someone has stolen your certificate and may be able to impersonate you."

So it seems the POP server and the SMTP server certificates were only valid for 3 months and I was FORCED to create the exception for both servers. Now I am worried the security has been breached.

By clicking here and clicking there, I stumbled on a few people who seem to have this problem, but each with their own limitations. My operating System is Windows 10 without the option to upgrade. I have not extended the security updates because I don't understand if it is just the operating system uploading to the cloud or everything on my computer and I am not prepared to do the latter.

Is it safe to leave the band aid on that I have used for the moment? Can I create an exception for the phone? Or is there a glitch that someone needs to walk me through fixing?

Thanking you in advance

Clinton

I am getting an error for an outdated certificate on my mail smtp server and when I try to add a security exception Thunderbird does absolutely nothing when i click the button to add a security exception where I can send mail. I end up having to cancel the window and discard my email. It will also not go view the certificate and if you ask it to check it just hangs up forever in and endless loop of checking.

I am using a E-mail server that uses LetsEncrypt certificates. I was using Thunderbird 128 ESR without problems. When the certificate was updated, I was requested to confirm - then sending E-mails was possible. Now I have updated to Thunderbird 140 ESR. The E-Mail servers LetsEncrypt certificate was now updated but in Thunderbird I do not get any information about this, nor get I requested to check the new certificate. The SMTP connection just fails. The IMAP access to the E-mail server works fine. (IMAP and SMTP work both fine with K9-Mail on my mobile device)

How can I get Thunderbird to ask me again to check the updated certificate?

Sending an email produces the following:

"Send Message Error Sending of the message failed. Unable to communicate securely with peer: requested domain name does not match the server’s certificate. The configuration related to mail.sinnamonlaw.com must be corrected."

After I click OK, the screenshot attached shows up.

Please advise, thank you!

I am using an email server that currently is using certificates that have expired. That problem is being worked on. In the meantime, whenever I access the server to open a folder, I get a pop-up notification telling me that the certificate has expired. I go ahead and confirm the security exception and check the box to permanently store the exception. Trouble is this ISN'T being persisted, when I open a different folder I have to go through this process again in order to access my emails in that folder.

Me thinks you got a bug in your software Kemosabe!

A couple months ago, I asked internet provider to discontinue service. I continued to get emails from their server anyway. In fact, I think I am continuing to get some from them but appears they maybe forwarded to my gmail address instead of iowatelecom.net address that I was using. Now, when Thunderbird downloads my emails, first thing that pops up is a message saying "The certificate for imap.iowatelecom.net is not valid for that server. Someone could be trying to impersonate the server and you should not continue." Then, it gives me the little box with "Dismiss", that I can check. It will go ahead and download my emails into the gmail folder. The iowatelecom.net folder is in RED and no emails are going to that folder. Can I or should I get rid of the iowatelecom.net folder and if so, how should I proceed. Just don't want to mess everything up. Thanks for the help.

I'm using Thunderbird 140.5.0esr. I have a remote email server on a small "linode" and recently had to restore it from a backup.

When opening Thunderbird, I get the message "The certificate for adonax.com expired on 10/29/2025." I've been getting emails up to and including yesterday.

I ran the renewal program (sudo certbot renew) from the command line of my remote server, and was told the certificate did not need renewing. The "expiry date" is shown to be 2026, March 20 when having certbot display the certificate information.

So, there is some sort of disconnect happening in the communications between Thunderbird and the locations of the certificates on my server. I'm hoping for some advice as to how to trace the path. One possibility is that there is a location on my server that is used to connect to the certs and this is holding stale information due to the recent restore done for the remote server. Another is that maybe there is cached information or something else blocking the request from Thunderbird.

From Thunderbird, I am presented with a form "Add Security Exception". This indicates that thunderbird is contacting the location adonax.com:993. I checked the port from the server using UFW and it is open to all. The Thunderbird form however hangs when I hit the "Get Certificate" button, and clicking the "Confirm Security Exception" appears to do nothing. The button "View..." opens a tab with the expired certificate. All the information on the certificate that is displayed by Thunderbird looks good, matches what I have in terms of URLs, but the dates are wrong.

Is there perhaps something blocking thunderbird from using port 993? Is there a way to test that? If 993 is working, I will try to research what is going on there at the Ubuntu end. I tried putting adonax.com:993 in Chrome and got an ERR_UNSAFE_PORT, for what that is worth.

I have 4 emails in Thunderbird, one of those I also have on my phone, it is receiving mail, on my desktop, two of the emails have no email today, and two I have only one email, all should have 10 to 20 or more emails. I do have the emails on the website, but they are not loading onto Thunderbird. I get this message, "The certificate for imap.knology.net is not valid for the server. Someone could be trying to impersonate the server and you should not continue.

 Can you offer any help?

I have 2 emails provided by my ISP (knology), I have received no emails since 7:30 on 12/5, the are on the webmail site. The other 2 emails are gmail accounts they are working fine. I am getting a message, "The certificate for imap.knology.net is not valid for that server. Someone could be impersonating the server, you should not continue."

 The fact that the gmails work and knology does not work is a clue but I don't know what it means.

I have contacted my ISP and after 45 minutes they gave up and said they will escalate and get back to me,

with in a couple days! it was on a Saturday.
                                                         Thank you, Mike

Thunderbird says this "the certificate for imap.supanet.com does not come from a trusted source". however I have used this email for some time and am happy with it . can I continue with this certificate as I do trust this source

I generated a CSR file via the instructions at https://support.mozilla.org/en-US/kb/instructions-smime-certificate-using-csr#thunderbird:linux:tb145 . After submitting and receiving a certificate from a CA, importing it the People tab of the Certificate Manager does not do anything: nothing new appears in the Your Certificates tab.

Where are the private keys associated to the generated CSRs stored? How can I access them to resolve this?

Running 140.5.0esr via flatpak on Fedora 43 Kinoite.

Hi,

I’m using Thunderbird on Windows and recently ran into a certificate warning that I can’t safely interpret, even after searching the web and using AI tools (which gave me inconsistent answers).

Thunderbird tries to connect to the iCloud contacts server p123-contacts.icloud.com (CardDAV). When it does, I get a “wrong site” certificate error. When I click “View certificate”, Thunderbird shows a valid certificate, but not for Apple/iCloud – it’s for login.kraftcom.de (issued by DigiCert / GeoTrust TLS RSA CA G1). I did not accept the exception.

From what I can see online, p123-contacts.icloud.com is a legitimate Apple domain, but it is also mentioned in some phishing / scareware contexts, which makes me even more unsure how to interpret this combination (Apple host + Kraftcom certificate). I’m also not sure whether this is simply a captive-portal / ISP login interception effect or something that should worry the wider community.

My questions:

Is this behavior expected in any scenario, or does it indicate a misconfiguration / MITM situation that Thunderbird should treat as a serious security issue?

Is there anything I should check or change on my side (Thunderbird config, network, ISP, certificates)?

Is there any additional diagnostic information I can provide (logs, screenshots) that would help you assess whether this is a Thunderbird issue or a network/ISP issue?

I specifically did not confirm the certificate exception and I would like to keep my setup secure, but I also want to make sure the community is aware if this is a broader problem.

Thanks in advance for any guidance

When someone sends me a msg, it displays along with the HTTP equivalent? Trying to figure out what setting is out of Wack such that I ses the HTTPS display of the message? Thanks