Afteroffice

This page is read only. You can view the source, but not change it. Ask your administrator if you think this is wrong.
====== Why is my mail client showing SSL expiration warning? ======

AfterOffice uses SSL certificates that are issued by [[https://letsencrypt.org/getting-started/|Let’s Encrypt]] for all of our email servers, to support the secure SSL connections. Let's Encrypt has two main root certificate:

  * **DST Root CA X3**: An older root certificate that are trusted and recognised by older devices (e.g. Windows XP prior to SP3, MacOS below 10.12.1) and older mail clients (e.g. Windows Live Mail)
  * **ISRG Root X1**: A newer root certificate that are trusted and recognised by newer devices (e.g. Windows XP SP3 and above, MacOS 10.12.1 and above) and newer mail clients

As of Sep 30, 2021, Let's Encrypt has retired and discontinued the use of DST Root CA X3. If you are using mail client to access your emails with secure IMAP/POP3/SMTP connections on an older device -- which do not trust/recognize ISRG Root X1 by default -- you will get an SSL certificate expiration warning. 

Users who are using the following devices can try to install and trust the new root certificate manually.

  * [[faq:profile:how_to_install_root_cert_win_7|Windows 7]]
  * [[faq:profile:how_to_install_root_cert_macos|MacOS version 10.12 or older]]
  * [[faq:profile:how_to_install_root_cert_iPhone_iOS|iPhone iOS below version 10]]

If the above does not work for your device, you can opt to:
  * Update your device's software/system in order to be compatible with the new root certificate, or 
  * Use a newer device with an updated OS/system, or
  * Disable SSL connection on your mail client (not recommended).

Reference:
[[https://letsencrypt.org/docs/dst-root-ca-x3-expiration-september-2021/|DST Root CA X3 Expiration]], [[https://letsencrypt.org/docs/certificate-compatibility/|ISRG Root X1 Certificate Compatibility]]
Afteroffice

User Tools

Site Tools

Page Tools
