This site will have limited functionality while we undergo maintenance to improve your experience. If an article doesn't solve your issue and you want to ask a question, we have our support community waiting to help you at @FirefoxSupport on Twitter and/r/firefox on Reddit.

Avatar for Username

Search Support

Avoid support scams. We will never ask you to call or text a phone number or share personal information. Please report suspicious activity using the “Report Abuse” option.

Learn More

Ova tema je arhivirana. Pitajte drugo pitanje ako vam je potrebna pomoć.

DST Root CA X3 certificate after 30 september 2021

  • 2 odgovori
  • 1 ima ovaj problem
  • 1 view
  • Posljednji odgovor poslao Matt

zygdresze1
zygdresze1
more options

Hello. I have an issue checking mail due to expired root certificate DST Root CA X3. The version of Thunderbird is quite old, but i appreciate its current functionality and don't feel urge to upgrade it to newest version. Mentioned root certificate is used to confirm Lets Encrypt certificate mail server is using. I installed ISRG Root X1 self signed, Lets Encrypt R3 and IdenTrust Commercial Root CA 1 (which is replacement for DST one) in my Windows 7, but Thunderbird still looks at DST Root CA X3 checking mails. This certificate is inside NSS Thunderbird base flagged as builtin object and can't be removed. Seems like Thunderbid doesn't care I have newer proper certificates in system. Can I somehow fix the certificate issue without upgrading TB to newest version?

Hello. I have an issue checking mail due to expired root certificate DST Root CA X3. The version of Thunderbird is quite old, but i appreciate its current functionality and don't feel urge to upgrade it to newest version. Mentioned root certificate is used to confirm Lets Encrypt certificate mail server is using. I installed ISRG Root X1 self signed, Lets Encrypt R3 and IdenTrust Commercial Root CA 1 (which is replacement for DST one) in my Windows 7, but Thunderbird still looks at DST Root CA X3 checking mails. This certificate is inside NSS Thunderbird base flagged as builtin object and can't be removed. Seems like Thunderbid doesn't care I have newer proper certificates in system. Can I somehow fix the certificate issue without upgrading TB to newest version?

All Replies (2)

zygdresze1
zygdresze1 Vlasnik pitanja
more options

Seems i was able to resolve the issue - I just needed to add ISRG certificate directly in Thunderbird base of certificates, not in Windows base. Well, few hours passed ...

Matt
Matt
  • Moderator
  • Top 10 Contributor
more options

if you used a current version they the update would be managed for you, so really if you felt inconvenienced it was through your own choice. Only the current release version is supported with patches.