The server '{0}' is configured for Office 365 hybrid, but the certificate '{1}' is not correct for federation and mail flow ...

The server '{0}' is configured for Office 365 hybrid, but the certificate '{1}' is not correct for federation and mail flow for Office 365 hybrid configuration. Expected status: Get-ExchangeCertificate result should show third party, have a private key, and be associated with the SMTP service. Actual status: IsSelfSigned = '{2}', HasPrivateKey = '{3}', Services = '{4}'. Click on the link 'get help fixing this issue' in the actions pane located on the right side of the screen for assistance.