Renew Zimbra 8.8.10.GA.3039 self-signed certificates and make it work with external AD auth again

Job ID: 31781137

Budget: €30 – €250 EUR

After restart Zimbra 8.8.10.GA.3039 services are not starting.
zmzontrol restart gives
-------------------------------------
Connect: Unable to determine enabled services from ldap.
Unable to determine enabled services. Cache is out of date or doesn't exist.
-------------------------------------
after ldap start, starting the zmcontrol giving:
-------------------------------------
Unable to start TLS: SSL connect attempt failed error:14090086:SSL routines:ssl3_get_server_certificate:certificate verify failed when connecting to ldap master.
-------------------------------------

It must be something w certs, cauce we have different backups and they are not starting also.
Related categories: System Admin Linux Windows Server Ubuntu