Resigned using StartSSL as it's a more widely trusted CA.