I resolved using 3 things. Not sure the first 2 had any bearing:
1. Reconfigured dovecot's 20-imap.conf file to turn on the Thunderbird workaround tb-extra-mailbox-sep
2. Turned off OCSP under thunderbird's Advanced->Validation settings
3. Used settings similar to these:
IMAP server: mail.somedomain.com
Port: 993
Security: SSL/TLS
Authentication Method: normal password
Username:
dickie@somedomain.comSMTP server: mail.somedomain.com
Port: 587
Security: STARTTLS
Authentication Method: normal password
Username:
dickie@somedomain.comNote, do NOT try to test or retest your settings! Just go straight to 'Done'. You'll get a prompt to ignore the cert (heart of the problem?).