Thunderbird Cert Medic Free is a Windows utility for inspecting and safely cleaning saved SSL/TLS certificate exceptions used by Mozilla Thunderbird mail connections. Certificate exceptions can remain behind after a certificate is renewed, a mail server changes, an account is removed, or an old endpoint is no longer used.
See what Thunderbird is still trusting
Cert Medic scans Thunderbird's saved certificate exceptions and checks the related mail-server and certificate state. It separates entries that are valid and in use from high-confidence orphaned entries that are eligible for cleanup and entries that still need review.
Cleanup designed around safety
Scanning is read-only. When you choose to clean an eligible exception, Cert Medic creates and verifies a backup first, closes Thunderbird, removes only the selected eligible exception, and restarts Thunderbird automatically. Verified Undo is available after cleanup.
Free edition
- Scan saved certificate exceptions
- Live mail-server and certificate validation
- Orphaned vs. Review classification
- Verified backup before cleanup
- Automatic Thunderbird close, cleanup, and restart
- Verified Undo
- Clean one eligible exception at a time
Private by design: processing stays local to your computer. Cert Medic does not need access to your email messages or passwords.
Free for personal use. No checkout is required. Requires Thunderbird 128 or newer on Windows.

Thunderbird Cert Medic is an independent third-party tool and is not affiliated with Thunderbird or MZLA Technologies Corporation.