I guess I should have been clearer. Are they sure they have configured exim to reply to TLS requests on port 25?
Just setting a cert file name isn't enough. They need the proper TLS Connect configuration: 43. Encrypted SMTP connections using TLS/SSL