The issues with SSL on the mail server have been fixed.  It was caused by the new certificate ca-bundle file only having the intermediate files in it while last years had our site certificate followed by the intermediates.  I had to cat both files together into a third which made dovecot and postfix happy.  The web server was unaffected by this because it’s configuration includes both files so all of the necessary certificates were available to it.