2. Avast offers instruction on how to force Thunderbird to use it's self signed certificates. Personally I find the process rather poor security. The certificates are issued in a chain of trust, Avast chooses not to have their business audited and meet the costs of same to be included, so ask users to reduce their security so the company can hack into your communications.