CA issues after upgrade from 6.0 to 7.0

[rwcanary]

Problem:

[zimbra@zmail ~]$ sudo zmcertmgr createca -new
** Creating /opt/zimbra/ssl/zimbra/ca/zmssl.cnf...done
** Creating CA private key /opt/zimbra/ssl/zimbra/ca/ca.key...done.
** Creating CA cert /opt/zimbra/ssl/zimbra/ca/ca.pem...done.
[zimbra@zmail ~]$ sudo zmcertmgr deployca
** Importing CA /opt/zimbra/ssl/zimbra/ca/ca.pem into CACERTS...done.
** Saving global config key zimbraCertAuthorityCertSelfSigned...done.
** Saving global config key zimbraCertAuthorityKeySelfSigned...done.
** Copying CA to /opt/zimbra/conf/ca...done.
unable to load certificate
9355:error:0906D06C:PEM routines:PEM_read_bio:no start lineem_lib.c:648:Expecting: TRUSTED CERTIFICATE
[zimbra@zmail ~]$ sudo zmcertmgr deploycrt self -new
Can't deploy cert for -new. Unknown service.

Has anyone seen this before, or perhaps have an idea of why it is happening?

[folioguru]

I have just run into this same error message doing the deploy before upgrade.

Am a bit concerned to try the upgrade without a valid certificate first. However, our 6.0.12 is running fine.