Certificate-dependent connector configuration: Be sure that your on-premises email server is configured to use a certificate to deliver email to Microsoft 365, and the Typical-Identify (CN) or Topic Alternate Identify (SAN) in the certificate contains a domain name that you've got registered in Microsoft 365, and you have made a https://www.hostscheap.com/domain-name-registration