I know there are some other questions (with answers) to this topic. But none of these was helpful for me. I have a Postfix server (postfix 3.4.14 on Debian 10 (Buster)) with the following configuration (only the interesting section): If I check the configuration with OpenSSL, I get (please note that I have made the domain name unrecognizable with “xxxxxx.de”):