root

letsencrypt renew
cd /opt/zimbra/ssl/letsencrypt/
cp /etc/letsencrypt/live/mail.it-sakh.net/* .
chown zimbra:zimbra /opt/zimbra/ssl/letsencrypt/*
 vi /opt/zimbra/ssl/letsencrypt/chain.pem
su - zimbra
cd  /opt/zimbra/ssl/letsencrypt/
cp /opt/zimbra/ssl/letsencrypt/privkey.pem /opt/zimbra/ssl/zimbra/commercial/commercial.key
/opt/zimbra/bin/zmcertmgr verifycrt comm privkey.pem cert.pem chain.pem
/opt/zimbra/bin/zmcertmgr deploycrt comm cert.pem chain.pem
zmcontrol restart