When #Thunderbird says it cannot connect to the submission server because of an « unknown #TLS error », what it really means is sometimes:
« The server certificate has the #OCSP Must-Staple extension, but the server did not provide OCSP stapling information ».
Weird thing, it could drop the connection earlier, but does it only after server and client key exchange. Hard to debug 😨
Pro tips, OCSP stapling is not supported by your MTA.