You may be able to fix this by changing your email server setup to provide a different certificate, one which embeds the full chain. (Probably fullchain.pem)
Since postfix was working for every other site on the server, I never thought to try that. But I did and it worked! Thank you very much.