I know this is an old post but I'm just curious since we had this problem with ZD 2 the last time we updated our certs and now we're seeing it again (now with ZD 7) after another cert upgrade.

The commercial certs install/validate just fine on the server and web browsers don't produce any errors but then give un-trusted in zimbra desktop and have to be accepted.