The server {0} is configured for Office 365 hybrid, but the certificate '{1}' is not proper in place for federation and mail ...

The server {0} is configured for Office 365 hybrid, but the certificate '{1}' is not proper in place for federation and mail flow for Office 365 hybrid configuration. Expected status: get-exchangecertificate to see it should be third party, have a private key, and have the SMTP service associated with. Actual status: IsSelfSigned = {2}, HasPrivateKey = {3}, Services = {4}.