please update to the last available rpms.
also please check that you do not have any ´ˋ ‘ o ' in any of the ldap field.
also check you do not have any mismatch between the key and the cert you provides.
every night certificates are checked for their validity and if not valid they are replaced by the self signed certificate.
also be aware that SME 10 does not support elliptic certificates, as it will not work with the mail services. Check your providers gives you a rsa certificate and not an elliptic. This is also checked for.