As ROOT
/opt/zimbra/bin/zmcertmgr createca
/opt/zimbra/bin/zmcertmgr deployca -localonly
/opt/zimbra/bin/zmcertmgr createcrt self
/opt/zimbra/bin/zmcertmgr deploycrt self
/opt/zimbra/bin/zmcertmgr verifycrt self
/opt/zimbra/bin/zmcertmgr createcsr self -new -subjectAltNames "server1,server1,server3"
/opt/zimbra/bin/zmcertmgr createcrt self
/opt/zimbra/bin/zmcertmgr deploycrt self -allserver
/opt/zimbra/bin/zmcertmgr viewdeployedcrt
/opt/zimbra/bin/zmcertmgr addcacert /opt/zimbra/ssl/zimbra/server/server.crt
su - zimbra
zmcontrol stop;zmcontrol start