Setting lmtp_tls_security_level to none allows mail delivery to succeed.
Setting lmtp_tls_CApath fixed this (although that wasn't necessary in 2.11.4). Sorry for the noise. :)
--Quanah -- Quanah Gibson-Mount Platform Architect Zimbra, Inc. -------------------- Zimbra :: the leader in open source messaging and collaboration