Generating new SSL certificate for exim4
Cargo culted direct from the exim site.
openssl req -x509 -newkey rsa:1024 -keyout /etc/exim4/exim.key -out /etc/exim4/exim.crt -days 9999 -nodes
The really important bit is that the common name (CN) field must be the server name (at least so it seems to be for me)
Don't forget - if your pop3 and imap certificates also expire at the same time to renew them to.