The QUERY SSLKEYRINGPW command will show you the key-ring file password that the server is currently using. If the password was changed with an external utility, ensure that the password is the same as that which was specified in the SET SSLKEYRINGPW command. If the password was lost, issue the DELETE KEYRING command to delete the current key-ring file. When you restart the server it will generate a new key-ring file, password, and self-signed certificate. Issue the QUERY SSLKEYRINGPW command to obtain the new password. Then use an external utility to import additional certificates again and designate one as the new default. Restart the server to use the additional certificates.