Concerning mail

[carlos77]

Hello there,

My iOS mail app stopped receiving mail from my helioho.st mail server. It seems the certificate expired. Can anything be done to reactivate the account? Thanks in advance for any help you can offer.

The SSL certificate for javalan.helioho.st (IMAP 993) expired Feb 13 2026.
iOS Mail is rejecting it.
OpenSSL verify return code: 10 (certificate has expired).

Regards,

Carlos

[wolstech]

You can renew the certificate in Plesk under SSL/TLS certificates (select the option to secure mail when reissuing the certificate).

That said, the supported mail configuration is to use tommy.heliohost.org as the server for IMAP/SMTP instead of your domain. Doing that will prevent this issue (as well as several others).

[carlos77]

hi. thanks for the reply. actually, i used the heliohost server's own mail client setup, for iphone there's a profile configuration that's downloaded onto the phone. There it automatically sets the incoming mail server host name: javalan.helioho.st, user name: spider@javalan.helioho.st, over SSL port 993. this worked before on my iphone, but recently just gives me an error trying to reach server. i checked the SSL certificate in my plesk control panel (javalan.helioho.st account), and i do have the Let's Encrypt certificate selected. I don't quite know how to update it.

Carlos

[carlos77]

PS. I believe it's the iPhone's increased security that's clamping down on the certificate thingie, because i tried setting up the mail client on my Mac with the heliohost server and it was also raising security flags, and I needed to agree to proceed, which it then successfully set up the mail client. 

[wolstech]

Yeah, that's a major reason we recommend manual configuration using the server name (tommy.heliohost.org). Mail clients today check that the server name you enter against the name that the server identifies as when you connect, and the name on the certificate if applicable. The mail server on Tommy always announces itself as tommy.heliohost.org regardless of user, so when you use javalan.helioho.st as the host name, the client connects, gets a "Hi I'm a mail server called tommy.heliohost.org" and the client goes "WTF that doesn't look like javalan.helioho.st, I'll show a warning about it".

The tommy certificate is always renewed automatically and using the server host name means the server HELO announcement matches the host name.

That said, I just ran the renewal for your SSL certificate manually for you. You can do this yourself in the future in Plesk under SSL/TLS certificates->Reissue Certificate->Install under the Lets Encrypt option->make sure to check the box that says "Secure mail on this domain"->Get it free.