We're calling on all EU-based Mozillians with iOS or iPadOS devices to help us monitor Apple’s new browser choice screens. Join the effort to hold Big Tech to account!

Search Support

Avoid support scams. We will never ask you to call or text a phone number or share personal information. Please report suspicious activity using the “Report Abuse” option.

Learn More

My certificate imported, but Certificate Manager can't locate it. Why?

  • 9 iimpendulo
  • 2 inale ngxaki
  • 1 view
  • Impendulo yokugqibela ngu Faraway17

more options

A certificate without * <customdomain.com> has been imported to Thunderbird via Preference and it's visible, but when going to Security -> Digital Signing -> Select (Certificate) it states "Certificate Manager can't locate a valid certificate that can be used to digitally sign your messages". Why?

A certificate without * <customdomain.com> has been imported to Thunderbird via Preference and it's visible, but when going to Security -> Digital Signing -> Select (Certificate) it states "Certificate Manager can't locate a valid certificate that can be used to digitally sign your messages". Why?

All Replies (9)

more options
My certificate imported

Where did you import it to? If this is a personal certificate it should go into the 'Your Certificates' tab.

more options

of course. Thunderbird doesn't seem to locate it even if it's been imported to "Your Certificates" and it has the same name and email(both in crt and account).

more options

Did you import the cert and the private key?

more options

christ1 said

Did you import the cert and the private key?

Do you mean combining public and private key into a single crt file?

more options

Something like that.

more options

Yes I did, in fact it automatically merges both public and private keys to some_file.pk12 file when using "openssl pkcs12" utility. I checked the content of pk12 file and it has both keys

more options

I think the problem was being caused by the way how FQDN name was assigned to my certificate. Although I applied for <customdomain.com> certificate (without www or other subdomains), the certificate issuer released the certificate(by default) under <www.customdomain.com>(which is a subdomain). So in order for Thunderbird Certificate manager to locate a valid certificate the email should have been something similar to <name@www.customdomain.com>.

more options

Are you saying it is working now?

more options

I will try it once I get my certificate reissued.

p.s: Sorry for delay. I was in a travel :)