Os comando dever ser rodados com o usuário zimbra
/opt/zimbra/bin/zmcertmgr createcsr comm -new -keysize 2048 -subject “/C=BR/ST=PR/L=PINHAIS/O=MUNICIPIO DE PINHAIS/OU=TI/CN=srvwebmailp.p.pinhais.pr.gov.br”
/opt/zimbra/bin/zmcertmgr verifycrt comm ./private.key ./certificate.crt ./ca_bundle.crt
/opt/zimbra/bin/zmcertmgr deploycrt comm ./webmail.pinhais.pr.gov.br.crt ./commercial_ca.crt