Bluehost Web Hosting Help

Email Security Warning When Using SSL

Due to the Heartbleed bug we have changed the SSL certificates used on our shared and reseller servers. If you used the mail (e.g. mail.example.com) subdomain when configuring your email client, because the certificates have changed, you will see a notification prompting you to accept or trust the certificate; just like when you setup your email client. Your Email Client (Mail, Outlook, Thunderbird, ect. ) will show you an error similar to:

"The server you are connected to is using a security certificate that could not be verified. A certificate chain processed, but terminated in a root certificate which is not trusted by the trust provider. Do you want to continue using this server?"

There are two ways to resolve the issue, you will either need to trust the SSL Certificate or use the servers hostname as your server, e.g. box465.BlueHost.com.

Below are the instructions on how to change the settings for the most frequently affected email clients.

Mail on OS X

  1. When prompted to review the certificate, click the Show Certificate button.
  2. Check the checkbox to Always trust *.BlueHost.com when connecting to mail.example.com
  3. Click the Continue button to accept the new SSL certificate.

Once done you should be able to continue using the SSL Certificate without any problems for any email account on this computer using the mail.example.com email servers.

For more information please see Apple's article: http://support.apple.com/kb/PH11706.

Microsoft Outlook

  1. From the File menu, choose Account Settings.
  2. Double click your account, or click the account once and then click, Change.
  3. Change your Incoming mail server and your Outgoing mail server (SMTP) to box465.BlueHost.com
  4. Click the Next button to test the new settings.
  5. Once the settings test successfully, click the Close button.
  6. Click Finish to complete the changes.

Mozilla Thunderbird

  1. From the Menu Bar, choose Tools, then Options(On a Mac choose Preferences, from the Thunderbird menu.)
  2. Choose the Advanced panel.
  3. Then click the Certificates tab.
  4. Click View Certificates, then choose the Servers tab.
  5. Click the Add Exception button.
  6. Enter your server name followed by the port number, e.g. https://mail.example.com:993.

For more information please see Mozilla's article: https://support.mozilla.org/en-US/kb/add-security-exception.

Knowledgebase Article 86,854 views bookmark tags: certificate email secure warning (updated 475 days ago)


Was this resource helpful?

Did this resolve your issue?


Please add any other comments or suggestions about this content:





Recommended Help Content

Purchasing or Renewing SSL certificates

How to renew an existing SSL certificate--or purchase a new one, within your cPanel (updated 185 days ago)

BlueHost.com HTTPS Security Error

When you try to use BlueHost.com over a secure form it will tell you that email it sends will not be encrypted. (Happens more often with Firefox) (updated 2125 days ago)

Webmail Secure Login

Instructions for how to log into webmail securely (updated 107 days ago)

Related Help Content

Basic Site Security Checklist

What can I do to increase my Site Security while hosting with Bluehost? (updated 754 days ago)

Email not sending from Client or Webmail

Trying to send out emails from multiple email accounts fail from both webmail and third party email clients. Possible Reasons: The maximum emails per hour has been exceeded. This can be caused by forw (updated 95 days ago)

FTP setup using Secure FTP (SFTP)

How do I use a secure FTP connection? (updated 970 days ago)

Email Accounts - Add, Delete and Manage

Where do I Add, Delete and Manage Email Accounts? (updated 1445 days ago)

421 Unexpected Failure

Explanation of error's cause and how to resolve it. (updated 915 days ago)

How to use the Free Shared SSL Certificate

How do I use the free shared SSL Certificate? (updated 96 days ago)

Email Setup with Thunderbird

Configuring your email client: Thunderbird (Mozilla) (updated 966 days ago)

SSL Installation of Self-Signed Certificate

I need to have an SSL Self-Signed Certificate installed for my domain. (updated 95 days ago)