My scheme: Internet -> MTA -> Exchange.
Letters that come to the MTA from outside must be TLS-encrypted.
I added a certificate to the MTA, but I can not check whether the checkmark is checked-use TLS (the interface has moved down).
In this case, smtp test via mxtoolbox shows that the command 250 STARTTLS is not sent from the MTA server.
Is it possible to check whether the starttls is enabled via clash?