Renewed commercial.crt - all went smooth except iPhones stopped working - nor sure why yet.
Do we have to remove the email account from the iPhones and recreate it?
and when checking site with https://ssltools.thawte.com/checker/views/certCheck.jsp
Certificate installation successfully checked.
Root installed on the server.
For best practices, remove the self-signed root from the server.
Not sure how to 'remove' that self-signed root - where is it?
We did zmlocalconfig -e ssl_allow_untrusted_certs=false
but that didn't make much difference.