[nvrmind]

Since you're the net admin guy (and I have mentioned this to our net admin guy, but he doesn't like change... and this is the way he's always done it), you can make ssl work... even with a self-signed certificate, as long as you use the fully qualified domain name of the mail server on the certificate... the default is the netbios name... and that's what our server is using... bah!