Thanks for reporting.
Seems like a behavioral change in TB.
Their docs to install a self-signed certificate: https://manuals.gfi.com/en/kerio/connect/content/server-configuration/ssl-certificates/self-signed-certificates-in-mozilla-thunderbird-950.html
Better is ofc to use public SSL certificates, like from the let’s encrypt project.
