Our certificate was created at StartSSL (StarCom), and it appears that StarCom root authority will no longer (or is no longer) supported by 10.2.1. Once we purchased a certificate elsewhere and installed it, the iPhone had no issues validating and connecting via TLS. (imap SSL port 143, smtp SSL port 587).