This was mentioned in the official release thread for 16.9 but I think it warrants its own thread.
I upgraded two MX84's running 16.7 to 16.9 last night, both are now throwing certificate errors to the clients.
This is what we were getting before the upgrade:
MX running 16.7 software
And this is what both units are throwing this AM:
MX running 16.9 software
I rolled-back the firmware upgrade on one of them about 10 minutes ago and it is still throwing the self-signed certificate error unfortunately, which means that once you perform the upgrade, you cannot un-break it.