As it turns out there was one certificate that I could delete - tied to the IA server where I send my mail out - that needed to be deleted and that Thunderbird would actually let me delete. All's well that ends well and I'm happy to be back to work and able to communicate with the world.