[soetis1]

You obviously didn't read the link you posted. Email servers cannot do name verification with CAs, because there's no mapping to the domain/MX http://www.postfix.org/TLS_README.html#client_tls_verify