I'm sorry I should have mentioned that I followed Diablo925 "Ubuntu: How to setup TLS on postfix and dovecot" guide and have it working for in coming emails, according to "http://checktls.com/perl/TestReceiver.pl" it shows to be working.
Here is the reply from http://checktls.com
Trying TLS on mail.johnxxxxxxgd.com[60.12.50.27] (0):
seconds test stage and result
[000.038] Connected to server
[000.317] <-- 220 panel.johnxxxxxxgd.com ESMTP
[000.318] We are allowed to connect
[000.319] --> EHLO checktls.com
[000.356] <-- 250-panel.johnxxxxxxgd.com
250-PIPELINING
250-SIZE 20480000
250-ETRN
250-STARTTLS
250-ENHANCEDSTATUSCODES
250-8BITMIME
250 DSN
[000.357] We can use this server
[000.357] TLS is an option on this server
[000.358] --> STARTTLS
[000.395] <-- 220 2.0.0 Ready to start TLS
[000.396] STARTTLS command works on this server
[000.500] Cipher in use: ECDHE-RSA-AES256-GCM-SHA384
[000.500] Connection converted to SSL
[000.523]
Certificate 1 of 2 in chain:
subject= /C=US/ST=State/L=City/O=Business/OU=Business/CN=mail.johnxxxxxxgd.com/emailAddress=admin@johnxxxxxxgd.com
issuer= /C=US/ST=State/L=City/O=Business/OU=Business/CN=mail.johnxxxxxxgd.com/emailAddress=admin@johnxxxxxxgd.com
[000.544]
Certificate 2 of 2 in chain:
subject= /C=US/ST=State/L=City/O=Business/OU=Business/CN=mail.johnxxxxxxgd.com/emailAddress=admin@johnxxxxxxgd.com
issuer= /C=US/ST=State/L=City/O=Business/OU=Business/CN=mail.johnxxxxxxgd.com/emailAddress=admin@johnxxxxxxgd.com
[000.545] Cert NOT VALIDATED: self signed certificate
[000.545] So email is encrypted but the domain is not verified
[000.545] Cert Hostname VERIFIED (mail.johnxxxxxxgd.com = mail.johnxxxxxxgd.com)
[000.546] ~~> EHLO checktls.com
[000.585] <~~ 250-panel.johnxxxxxxgd.com
250-PIPELINING
250-SIZE 20480000
250-ETRN
250-AUTH PLAIN LOGIN
250-AUTH=PLAIN LOGIN
250-ENHANCEDSTATUSCODES
250-8BITMIME
250 DSN
[000.586] TLS successfully started on this server
[000.586] ~~> MAIL FROM:<test@checktls.com>
[000.636] <~~ 250 2.1.0 Ok
[000.636] Sender is OK
[000.637] ~~> RCPT TO:<admin@johnxxxxxxgd.com>
[000.687] <~~ 250 2.1.5 Ok
[000.687] Recipient OK, E-mail address proofed
[000.688] ~~> QUIT
[000.726] <~~ 221 2.0.0 Bye
Here is the reply from http://checktls.com
Trying TLS on mail.johnxxxxxxgd.com[60.12.50.27] (0):
seconds test stage and result
[000.038] Connected to server
[000.317] <-- 220 panel.johnxxxxxxgd.com ESMTP
[000.318] We are allowed to connect
[000.319] --> EHLO checktls.com
[000.356] <-- 250-panel.johnxxxxxxgd.com
250-PIPELINING
250-SIZE 20480000
250-ETRN
250-STARTTLS
250-ENHANCEDSTATUSCODES
250-8BITMIME
250 DSN
[000.357] We can use this server
[000.357] TLS is an option on this server
[000.358] --> STARTTLS
[000.395] <-- 220 2.0.0 Ready to start TLS
[000.396] STARTTLS command works on this server
[000.500] Cipher in use: ECDHE-RSA-AES256-GCM-SHA384
[000.500] Connection converted to SSL
[000.523]
Certificate 1 of 2 in chain:
subject= /C=US/ST=State/L=City/O=Business/OU=Business/CN=mail.johnxxxxxxgd.com/emailAddress=admin@johnxxxxxxgd.com
issuer= /C=US/ST=State/L=City/O=Business/OU=Business/CN=mail.johnxxxxxxgd.com/emailAddress=admin@johnxxxxxxgd.com
[000.544]
Certificate 2 of 2 in chain:
subject= /C=US/ST=State/L=City/O=Business/OU=Business/CN=mail.johnxxxxxxgd.com/emailAddress=admin@johnxxxxxxgd.com
issuer= /C=US/ST=State/L=City/O=Business/OU=Business/CN=mail.johnxxxxxxgd.com/emailAddress=admin@johnxxxxxxgd.com
[000.545] Cert NOT VALIDATED: self signed certificate
[000.545] So email is encrypted but the domain is not verified
[000.545] Cert Hostname VERIFIED (mail.johnxxxxxxgd.com = mail.johnxxxxxxgd.com)
[000.546] ~~> EHLO checktls.com
[000.585] <~~ 250-panel.johnxxxxxxgd.com
250-PIPELINING
250-SIZE 20480000
250-ETRN
250-AUTH PLAIN LOGIN
250-AUTH=PLAIN LOGIN
250-ENHANCEDSTATUSCODES
250-8BITMIME
250 DSN
[000.586] TLS successfully started on this server
[000.586] ~~> MAIL FROM:<test@checktls.com>
[000.636] <~~ 250 2.1.0 Ok
[000.636] Sender is OK
[000.637] ~~> RCPT TO:<admin@johnxxxxxxgd.com>
[000.687] <~~ 250 2.1.5 Ok
[000.687] Recipient OK, E-mail address proofed
[000.688] ~~> QUIT
[000.726] <~~ 221 2.0.0 Bye