postfix TLSのエラー

前提・実現したいこと

リレーサーバーとして楽天のプロバイダーのメールサーバーを利用しメッセージを送信したいです。
しかし、TLSのライブラリのバージョンがおかしいと怒られています。
どう対処すればいいのかが全くわからず困っています...

該当のソースコード

postconf -n

broken_sasl_auth_clients = yes
command_directory = /usr/sbin
compatibility_level = 2
daemon_directory = /usr/lib/postfix/sbin
data_directory = /var/lib/postfix
debugger_command = PATH=/bin:/usr/bin:/usr/local/bin:/usr/X11R6/bin ddd $daemon_directory/$process_name $process_id & sleep 5
inet_interfaces = all
inet_protocols = ipv4
mail_spool_directory = /var/spool/mail/
mailq_path = /usr/bin/mailq
masquerade_domains = patapatao.com
mydestination = $myhostname,$mydomain,localhost
mydomain = patapatao.com
myhostname = mail.patapatao.com
mynetworks = 127.0.0.0/8 192.168.10.0/24
myorigin = $mydomain
sendmail_path = /usr/sbin/sendmail
setgid_group = postdrop
smtp_sasl_auth_enable = yes
smtp_sasl_mechanism_filter = plain,login
smtp_sasl_password_maps = hash:/etc/postfix/relay_password
smtp_sasl_security_options = noanonymous
smtp_tls_CAfile = /etc/ssl/certs/ca-certificates.crt
smtp_tls_security_level = encrypt
smtp_tls_wrappermode = yes
smtpd_banner = $myhostname ESMTP $mail_name (PATAO Server)
smtpd_recipient_restrictions = permit_sasl_authenticated,permit_mynetworks,reject_unauth_destination
smtpd_sasl_auth_enable = yes
smtpd_sasl_security_options = noanonymous
smtpd_tls_cert_file = /etc/letsencrypt/live/mail.patapatao.com/fullchain.pem
smtpd_tls_key_file = /etc/letsencrypt/live/mail.patapatao.com/privkey.pem
smtpd_tls_loglevel = 1
smtpd_tls_received_header = yes
smtpd_tls_session_cache_database = btree:/var/lib/postfix/smtpd_scache
smtpd_tls_session_cache_timeout = 3600s
transport_maps = hash:/etc/postfix/transport
unknown_local_recipient_reject_code = 550

versions

-> % openssl version
OpenSSL 1.1.1f  31 Mar 2020

-> % postconf | grep mail_version
mail_version = 3.4.13

プロバイダーに直接アクセス

-> % openssl s_client --connect mail.gol.com:587
CONNECTED(00000003)
140245503800640:error:1408F10B:SSL routines:ssl3_get_record:wrong version number:../ssl/record/ssl3_record.c:331:
---
no peer certificate available
---
No client certificate CA names sent
---
SSL handshake has read 5 bytes and written 304 bytes
Verification: OK
---
New, (NONE), Cipher is (NONE)
Secure Renegotiation IS NOT supported
Compression: NONE
Expansion: NONE
No ALPN negotiated
Early data was not sent
Verify return code: 0 (ok)
---

OS　Ubuntu Server 20.04.3 LTS