tls_advertise_hosts = *
tls_certificate = CONFDIR/exim.pem
tls_privatekey = CONFDIR/exim.pem