Ubuntu 20.xx LTS server EXIM4 + Dovecot as mailservers Admin user : 3 Users (incl. 1 himself). 1 Webdomain 0 DNS records 0 mail accounts User 1(example[.]com) 1 webdomain → example[.]com DNS entries for example[.]com 1 mail domain(example[.]com) with 6 Email accounts with Let’s encrypt SSL. D…

Thanks for the response. Made a little progress after your suggestion of adding the two sub-domains. It seems to be connecting now, however, the self-signed SSL cert for mail is being presented for the admin’s domain and not for the actual domain. Cross checked Let’s Encrypt is enabled for both the…

Run v-add-lets-encrypt-host to generate a LE certificate for Lets encrypt

Still stuck on this. While connecting email clients to mail.domain.tld the self-signed certificate of admin domain is being presented. Just to review the setup: admin[.]com ---- 3 Users(1itself) - 1 Webuser(itself) - 0 DNS - 0 Mail | |___example[.]com --- 3 webusers - 1 DNS zone - 1 mail domain …

I suggest to don’t host anything under admin user, you should be warned when you add a webdomain. Please create a own user for it, then add there the web and mail accounts. If it still fails, update us, so we can proceed with further debug.

The admin domain was a different one than the domain facing this issue. Anyhow did a complete reinstall and this time no web-domain under admin user, still the self-signed root-certificate gets served to the emails account under domain1.tld. Edit: So this is 100% related to mail SNI not working.

what do you put as servernames in the client?

also waiting for solutions for this hehehe, testing everything as same as @TyrannosaurHex [image] TyrannosaurHex: I’ve tried a combination of settings, ports(143, 465, 993), STARTLS/SSL. Tried disabling Firewall(iptables and fail2ban) still the same result cannot connect using email client …

[image] falzo: what do you put as servernames in the client? on my case is mail.domain.tld for the servername on the email client

mail.domain.tld should be correct. did you try to telnet to it from the box where your client is running on? or at least ping to make sure, the ip is resolved properly? if it resolves, what does the logfiles (dovecot) say about the connection attempt? you obviouslly wanna search for your local IP a…