Certificate chain
0 s:/C=US/ST=California/L=Mountain View/O=Google Inc/CN=mx.google.com
i:/C=US/O=Google Inc/CN=Google Internet Authority G2
1 s:/C=US/O=Google Inc/CN=Google Internet Authority G2
i:/C=US/O=GeoTrust Inc./CN=GeoTrust Global CA
2 s:/C=US/O=GeoTrust Inc./CN=GeoTrust Global CA
i:/C=US/O=Equifax/OU=Equifax Secure Certificate Authority
Do you have the root certificate?
Yes the certificate for Equifax Secure Certificate authority is added in
the /etc/ssl/certs/ca-certificates.crt file
Did you tell Postfix what name to expect in the server certificate?
It does not contain the name alt4.gmail-smtp-in.l.google.com.
what do you mean by that? Are you referring to the alternate names on
the cert?