An SMTP server can advertise STARTTLS, complete a TLS handshake, and still present an identity that a careful client must reject. Encryption only proves that a session became unreadable in transit. It does not, by itself, prove that the peer certificate chains to a trusted root, covers ...