the way to find out why thunderbird refuses to log into IMAP is, apparently, this:
$ export MOZ_LOG=IMAP:5,timestamp MOZ_LOG_FILE=thunderbirdlog
$ thunderbird
(it didn't like it that the certificate for imaps:// has expired and chose to not surface this fact in any way whatsoever)