This is just for my future reference regarding what to do when certificates expire.
cd /usr/share/ssl/certs
make -B sendmail.pem
/etc/init.d/sendmail restart