Thunderbird can't connect to Dovecot (bad certificate: SSL alert number 42)

[Simon B]

On Sun, 18 Sept 2022 at 12:53, Goetz Schultz
<dovecot.expire1225 at suelze.de> wrote:
>
>
> On 18/09/2022 11:09, Stuart Henderson wrote:
> > On 2022-09-14, Goetz Schultz <dovecot.expire1225 at suelze.de> wrote:
> >> I had the same issue on TB102. Self-Signed certificates rejected despite
> >> having the CA installed correctly as authority. Turns out out that that
> >> TB now wants extension "Subject Alt Names". Added that and all works
> >> now. Seems another Google pressed issue being introduced (my Chromium
> >> had same issues and rejected certs before I added SAN).
> >
> > It's not just a "Google pressed issue".
>
> Seems I was a hasty in blaming .....
>

Not necessarily...  The CA Browser Forum ad[a|o]pted this partly
because Google started showing visible warnings in the Chrome Browser
when the CN was not replicated in the SAN field.

Regards

Simon