first get the new fingerprint:

openssl s_client -connect <server>:<port>| openssl x509 -md5 -fingerprint

• server ⇒ your uplink / provider port
• port ⇒ pop3 = 995

Then take the MD5 Fingerprint an change this in the fetchmailrc in /etc.