Hello
This issue was resolved in 5.130. The mail server should use the right certificates when connecting to mail.domain.com
However, it was not tested on Debian 9. You can send
us a ticket and grant access to your server. Our QA department will check.