*.ucc.asn.au was showing up as having an invalid certificate in firefox since we updated the certificate. To fix this, the ssl config in apache needed SSLCertificateChainFile updated to reflect the new Cert chain. See mussel:/etc/apache2/sites-available/default I've added a note for the next person. [BG3]