# this is in addition to the default 30_exim4-config_remote_smtp_smarthost 
 tls_verify_certificates = CONFDIR/smarthost.crt
 # force tls verify for smarthosts
 tls_verify_hosts = *
