TLS policy includes protocol versions and cryptographic algorithms, not just certificates.
Disable obsolete cryptography according to current organizational and platform guidance while preserving interoperability required by the mail service.
Submission and mailbox access can usually enforce stronger authenticated TLS expectations than opportunistic Internet SMTP.
For server-to-server mail, MTA-STS or DANE can add policy beyond opportunistic STARTTLS.