[exim] TLS questions

Hi

I'm trying to use TLS to recive mail from a remote server.
I've generete my caertificate with the follow command:

openssl genrsa -des3 -out exim.pem 2048
openssl req -new -key exim.pem -out exim.csr

I've send the exim.csr file to a CA, and It send back me exim.cer

I've configure in to my exim the follow lines:

######################################################################
#                    MAIN CONFIGURATION SETTINGS                     #
######################################################################

[...]
daemon_smtp_ports = 25 : 465
tls_on_connect_ports = 465
tls_certificate = /etc/exim/exim.cer
tls_privatekey = /etc/exim/exim.pem
tls_advertise_hosts = MAILSERVER1 : MAILSERVER2
tls_try_verify_hosts = MIALSERVER1 : MAILSERVER2
tls_verify_certificates = /etc/exim/exim.pem

When I try to connect form Server1 or to Server2 on port 25 I recive the
follow message:

503 STARTTLS command used when not advertised

When I try to connect on port 465 I recive the follow message:

Enter PEM pass phrase:

I've make a errors?

Andrea