New SSL Certificates for Everyone!!11

I have replaced my old StartCom certificate — this time with one from Comodo, as I am not particularly fond of StartCom’s practices.

The switch did not go entirely smoothly: the certificate is currently not being served correctly for mail, and I cannot rule out that other services are affected as well.

If you run into a warning about an invalid certificate on mail, please verify the fingerprint before accepting anything:

SHA256: 7D:03:38:BF:36:9A:8E:0C:5C:3E:01:34:D7:21:AE:4D:8E:45:EF:0D:ED:EA:61:6E:07:65:72:90:AC:F1:5D:93
SHA1:   88:1C:D1:C4:24:5B:A4:BA:42:B2:89:0A:97:B2:BD:D0:28:60:95:D8

Should you notice any other problems, please drop me a line at ed.vrestsurt@ezlo — thanks!

Update: Solved. My old certificate apparently contained the full chain, whereas the certificate Postfix was actually serving did not chain up to the root CA.