Trying to troubleshoot something lately, and thought I’d leave this out there.

Reason: Wanted to import the certificate into thunderbird to get rid of an error when I opened it. (my default account on home server is imaps)

Command eventually settled on:

openssl pkcs12 -export -inkey /etc/ssl/certs/imapd.pem -in mail.pks > pkcstest

It’ll prompt for a password and that’s it. You’ll need to enter that same password when importing.

Only when it failed did I realize why I still get the popup – the *name* is still invalid. (temporary internal DNS issue I don’t want to mess with), so… end result no better. Sigh.