Thunderbird Certificate Warning on Shared cPanel Hosting

Overview

When setting up an email account in Thunderbird on shared cPanel hosting, you may see a warning such as:

“The certificate is not trusted because it is self-signed”
“The certificate is only valid for hosting06.layerip.com”
“Unable to verify the identity of the server”

This is a common and expected behavior on shared hosting and does not mean your account has been compromised. This article explains why it happens and how to resolve it.

Why Does This Warning Appear?

On shared cPanel hosting, many customer domains share the same server. The SSL certificate installed on the mail server is issued for the server’s hostname (for example, hosting06.layerip.com) rather than your individual domain (for example, mail.yourdomain.com).

When Thunderbird connects to the mail server using your domain name, it checks whether the SSL certificate matches. Because the certificate is for the server hostname rather than your domain, Thunderbird displays a mismatch warning.

This is normal behaviour on shared hosting and does not indicate a security problem with your account.

What Is AutoSSL?

AutoSSL is a cPanel feature that automatically provisions and renews SSL certificates for domains hosted on the server. If your domain was recently added to the server, AutoSSL may not have provisioned a certificate for your mail subdomain yet.

AutoSSL typically runs within 24 hours of a domain being added. Once provisioned, the certificate warning in Thunderbird should resolve itself if you are using mail.yourdomain.com as your mail server address.

How to Resolve the Warning

Option 1 — Accept the Security Exception in Thunderbird (Recommended for Most Users)

This is the simplest solution and is safe to do on shared hosting:

1. When the warning appears, click Advanced or I Understand the Risks
2. Click Add Exception
3. Ensure Permanently store this exception is checked
4. Click Confirm Security Exception

Thunderbird will remember this exception and will not show the warning again for this account.

Option 2 — Use the Server Hostname Instead of Your Domain

If you would prefer not to accept an exception, you can configure Thunderbird to connect using the server hostname directly, which matches the SSL certificate:

1. In Thunderbird go to Account Settings
2. Select your email account and click Server Settings
3. Change the Server Name from mail.yourdomain.com to the server hostname (e.g. hosting06.layerip.com)
4. Do the same for the outgoing SMTP server under Outgoing Server (SMTP)

If you do not know your server hostname, please contact our support team and we will provide it.

When to Contact Support

Please contact our support team if:

• The certificate warning persists after several days and AutoSSL has not resolved it
• You are unsure of your server hostname
• You continue to experience issues connecting after following the steps above

We are happy to check the SSL certificate status for your domain and assist further.