To deploy a Multi-Domain SSL certificate or an SSL Wildcard certificate on another hosting server for Zimbra, follow these steps:

1. Obtain the SSL Certificate Files:

   • Receive the SSL certificate file (server_domain_com.crt), CA bundle file (server_domain_com.ca-bundle), and private key (commercial.key) from your Certificate Authority (CA).

2. Upload SSL Files to Hosting Server:

   • Copy these files to a temporary folder on your hosting server. For example, place them in the /opt/ directory.

3. Set Private Key Permissions:

   • Ensure the private key has the correct permissions using chmod 640 /opt/zimbra/ssl/zimbra/commercial/commercial.key.

4. Verify Certificate and Private Key Match:

   • Use the following command to verify that the certificate matches the private key:

     /opt/zimbra/bin/zmcertmgr verifycrt comm /opt/server_domain_com.crt /opt/server_domain_com.ca-bundle
     

   • The output should confirm the successful verification.

5. Deploy Multi-Domain or Wildcard Certificate:

   • For a multi-domain certificate, specify all domains you wish to cover in the deployment command.
   • For a wildcard certificate, ensure it covers all necessary subdomains.
   • Use the following command to deploy the certificate:

     /opt/zimbra/bin/zmcertmgr deploycrt comm /opt/server_domain_com.crt /opt/server_domain_com.ca-bundle
     

   • The output will show the deployment status.

6. Verify SSL Deployment:

   • Check the deployment using:

     /opt/zimbra/bin/zmcertmgr viewdeployedcrt
     

   • Review the details to ensure the correct certificate is active.

7. Restart Zimbra Services:

   • Log in as the zimbra user and restart services with sudo zmcontrol restart.

8. Check SSL Configuration:

   • Use an online tool like https://decoder.link/sslchecker/ to verify your SSL settings.