We have our own mail server running using iRedMail on Apache. It's been working for us for a number of years and there haven't been any issues with the SSL until now. One of our clients is trying to connect their smtp credentials to their Zendesk account and Zendesk is rejecting the connection because it doesn't fully trust the SSL. Zendesk support sent us to https://www.sslshopper.com/ssl-checker.html. When we test the domain on there without any ports it gets a full pass. If we put a ":587" or ":993" on the test we get the following error:
The certificate is not trusted in all web browsers. You may need to install an Intermediate/chain certificate to link it to a trusted root certificate. Learn more about this error. You can fix this by following Sectigo's Certificate Installation Instructions for your server platform (use these instructions for InstantSSL). Pay attention to the parts about Intermediate certificates.
We've ran tests on the ssl through ssllabs as well and both the imap. and smtp. addresses get A+ grades. Does anybody have any ideas about how to get this to work? Are there any port settings that we may not be thinking of?