Looking at the certificate, it seems that yes, the certificate authority is set to 'yes'. So the certificate needs to be regenerated?