even Exchange hybrid wizard runs fine, and SSL cert applied on default frontend connector. TLS still fails…
Get-ReceiveConnector "{SERVER-NAME}\Default Frontend {SERVER-NAME}" | fl TlsCertificateName Get-ExchangeCertificate $tlscert=Get-ExchangeCertificate {THUMBPRINT} $tlscertname="<I>$($TLScert.Issuer)<S>$($TLSCert.Subject)" Get-ReceiveConnector "{SERVER_NAME}\Default Frontend {SERVER_NAME}" | Set-ReceiveConnector -TlsCertificateName $tlscertname Restart-Service MSExchangeTransport