Stated correctly is that firefox ignores it
So yes it does work but firefox and the usual suspects scream about not being part of the ssl mafia (my blog).
If I switch off trust validation then you still get the oh shit your going to die a nasty death message from the mafia but my trust anchors do work
Its odd that postfix can but the web browsers cant. I kind of expected this if i am honest and apart from doing it i will leave this.