In a flurry of small amounts of activity this weekend, I managed to fix a couple of things that had been bugging others for a while now. First of all, http://mail.ufies.org will now correctly forward to the right place, where the root cert will work nicely. No more bitching that "mail.ufies.org doesn't match ufies.org".
The second part will help those to access mail via imaps and pop3s... the right cert is now loaded by the system so that it's no longer localhost, but the proper domain name.