changes in R14.0.0

Since upgrading a few days ago, I get the following from KMail after a suspend:

"The IP address of the host mail.xxx.xxx does not match the one the certificate was issued to."

And I think this is true, thanks to my ISP's way of dealing with certificates. However, answering the next popup:

"Would you like to accept this certificate forever without being prompted?"

with 'Forever', does not have the desired effect, because it all happens again after the next suspend.

Any obvious reason for this, or any other diagnostics I can try? It seemed to be fine with 3.5.13.2

cheers

ant