I seem to haven gotten the server back on-line using the below:
Single-Node Self-Signed Certificate
1. Begin by generating a new Certificate Authority (CA).
zmcertmgr createca -new
2. Then generate a certificate signed by the CA that expires in 365 days.
zmcertmgr createcrt -new -days 365
3. Next deploy the certificate.
zmcertmgr deploycrt self
4. Next deploy the CA.
zmcertmgr deployca
5. To finish, verify the certificate was deployed to all the services.
zmcertmgr viewdeployedcrt
Would still like to get the StartSSL certificate installed though but its less urgent now
