My server is running GNU/Linux CentOS 5.5 + Postfix 2.3.3 + Dovecot 1.0.7.
I got a mail from cacert.org saying my certificate is set to expire in 45 days, so I went to the cacert.org account to renew the certificate and got something like this:
-----BEGIN CERTIFICATE----- MIIEnzCCAoe (...) -----END CERTIFICATE-----
Neither cacert.org nor any searches I did explain what to do next. I replaced my certificate file contents with this new certificate for testing, but when email clients are starting to send a message, a pop-up says:
You are about to override how Thunderbird identifies this site. Legitimate banks, stores, and other public sites will not ask you to do this. Certificate status: This site attempts to identify itself with invalid information.
Certificate belongs to a different site, which could indicate an identity theft. Unkonwn identity. Certificate is not trusted, because it hasn't been verified by a recognised authority.
How do I update the certificate without this pop-up reaching end users now or after the certificate expires?