Zimbra tls certificates

Include on certbot might be needed - https://wiki.zimbra.com/wiki/Installing_a_LetsEncrypt_SSL_Certificate

--preferred-chain "ISRG Root X1" --force-renewal

• commercial.crt
• commercial.key
• commerical.chain.pem
• Not sure if you can use full chain

cp * /opt/zimbra/ssl/zimbra/commercial/
 wget -O /tmp/ISRG-X1.pem https://letsencrypt.org/certs/isrgrootx1.pem.txt
cat /tmp/ISRG-X1.pem >> /opt/zimbra/ssl/zimbra/commercial/commercial.chain.pem
/opt/zimbra/bin/zmcertmgr verifycrt comm /opt/zimbra/ssl/zimbra/commercial/commercial.key /opt/zimbra/ssl/zimbra/commercial/commercial.crt /opt/zimbra/ssl/zimbra/commercial/commercial.chain.pem
/opt/zimbra/bin/zmcertmgr deploycrt comm /opt/zimbra/ssl/zimbra/commercial/commercial.crt /opt/zimbra/ssl/zimbra/commercial/commercial.chain.pem

zmcontrol restart