You wrote: > since the upgrade to 6.9 at the weekend opensmtpd complains > smtp cert-check result="no certificate presented" > for incoming EMails. Again, this is just a notification from the server, that no client certificates were sent in case of client tls authentication. This has nothing to do with your second issue: > Diagnostic-Code: X-Postfix; TLS is required, but was not offered by host > mail.example.de I'd say that you can safely ignore the previous message.
Instead, I'd suggest trying to debug OpenSMTPD with -dT all (or -dT transfer) and look at the output. If there is something wrong with your certs or config, it'll be shown there.