CA issues after upgrade from 6.0 to 7.0

[rwcanary]

Problem:
[zimbra@zmail ~]$ sudo zmcertmgr createca -new

** Creating /opt/zimbra/ssl/zimbra/ca/zmssl.cnf...done

** Creating CA private key /opt/zimbra/ssl/zimbra/ca/ca.key...done.

** Creating CA cert /opt/zimbra/ssl/zimbra/ca/ca.pem...done.

[zimbra@zmail ~]$ sudo zmcertmgr deployca

** Importing CA /opt/zimbra/ssl/zimbra/ca/ca.pem into CACERTS...done.

** Saving global config key zimbraCertAuthorityCertSelfSigned...done.

** Saving global config key zimbraCertAuthorityKeySelfSigned...done.

** Copying CA to /opt/zimbra/conf/ca...done.

unable to load certificate

9355:error:0906D06C:PEM routines:PEM_read_bio:no start line:pem_lib.c:648:Expecting: TRUSTED CERTIFICATE

[zimbra@zmail ~]$ sudo zmcertmgr deploycrt self -new

Can't deploy cert for -new. Unknown service.
Has anyone seen this before, or perhaps have an idea of why it is happening?

[folioguru]

I have just run into this same error message doing the deploy before upgrade.
Am a bit concerned to try the upgrade without a valid certificate first. However, our 6.0.12 is running fine.