My understanding is to prevent these errors, you obtain the root certificate for each server mail certificate your Postfix server connects to, append it to a pem file and reference it with smtp_tls_CAfile in main.conf.
This could obviously take a while. On a Windows installation you can refer to a certificates store in the registry. Is there an easier way to do this on a *nix box?
