On 05-19-2021 5:06 pm, Viktor Dukhovni wrote: Why would the Postfix server have a "different certificate". DON'T DO THAT.
Something is being lost in translation here. How could you not have a different certificate? They are two different physical servers, with two different public IP's and two different hostnames and two different FQDN. How can you get the same certificate issued to two different servers that have different public IP's and different resolving FQDN's?