Google fetchmail

Google changes it cert for pop3 every soft often and you will get entries like this in your mail log for fetchmail.

fetchmail[3324]: pop.gmail.com fingerprints do not match!

in your .fetchmailrc file you will have a line like

options fetchall flush ssl sslfingerprint '92:73:17:4C:34:4B:68:F7:B2:17:71:42:0D:7F:9F:33'

To find the new fingerprint, use the following command

openssl s_client -connect pop.gmail.com:995 -showcerts < /dev/null | openssl x509 -fingerprint -md5 -text | grep Fingerprint | awk -F= '{print $2}'