Self-signed certificates in Mozilla Thunderbird

How to set a self-signed certificate in Mozilla Thunderbird as trustworthy

If you use self-signed certificates in Kerio Connect, users with Mozilla Thunderbird may experience problems with secure authentication from a directory service (LDAPs protocol).

If this is your case, create an exceptions for your self-signed certificate in the application.

  1. In Mozilla Thunderbird, go to Tools > Options > Advanced > tab Certificates.
  2. Click on View Certificates and go to tab Servers.
  3. Click on Add Exception.
  4. Enter the name of your mail server and click on Get Certificate.


Do not forget to use the port number of the mail server.


  1. Save the exception.


We recommend to check the option for permanent storage of the exception.

Your self-signed certificate is now considered as trustworthy by Mozilla Thunderbird.

Server certificate is not available

If your Thunderbird has a problem acquiring the server certificate, follow these steps:

  1. In Mozilla Thunderbird, go to Tools > Options > Composition > tab Addressing.
  2. Check the Directory Server option and click on Edit Directories > Add.
  3. Enter the necessary information a check Use secure connection (SSL). Confirm the dialog.
  4. In the list of directory service servers, select the one you have just created a open it.
  5. On tab Offline, click on Download Now.
  6. Save the settings.
  7. Now you can add the exception as mentioned above.
  • 3 Users Found This Useful
Was this answer helpful?

Related Articles

Configuring SSL certificates in Kerio Connect

To secure Kerio Connect by SSL/TLS encryption, you need an SSL certificate. SSL certificates...

Adding trusted root certificates to the server

If you want to send or receive messages signed by root authorities and these authorities are...

How do I configure OS X to use my self-signed SSL certificate?

Learn to configure OS X to use your self-signed SSL certificate with Entourage, Safari and...

How do I import a private key which is protected by a pass phrase?

When generating a certificate request, some key generation applications will create a pass...

How do I re-issue my SSL certificate?

You need to re-issue an SSL certificate, perhaps because it was not possible to renew with a new...