Is Your Server Using Weak Crypto?
A valid certificate means nothing if your server still accepts deprecated protocols like TLS 1.0 or weak ciphers. Connect to your SMTP server to extract the exact TLS version, cipher algorithm, and key exchange strength negotiated.