The certificate that has CN or SAN that contains a domain name you have registered using your Office 365 organization. SMTP relay lets Microsoft 365 or Office 365 relay emails on your own behalf by making use of a connector that is configured by using a TLS certificate (advisable) or https://www.hostscheap.com/dovecot-install-service