that's correct, and that's how i have my setup.
but i find that all the mail clients hang on the certs.
i believe its because of the root certificate?
since its newer, the mail clients don't have the updated certificate so it hangs.
and I was also told that you can give the client the root certificate either. (on hand shaking that is).
Is there a way around this?