Looks like the emails coming from stellar are delivered from an SMTP origin "mailgun.info" which uses an invalid client certificate; I'm getting errors:
SSL_accept error from mail-182-5.mailgun.info[23.253.182.5]: 0 warning: TLS library problem: XXX:error:XXX:SSL routines:SSL3_READ_BYTES:sslv3 alert bad certificate:s3_pkt.c:1258:SSL alert number 42:
At least they retry without SSL aftwards, and manage to deliver the emails.