The TLS handshake failed
Encryption could not be established with the receiving server.
In detail
Reachable only when the security mode demands encryption. On an opportunistic setting the engine falls back to plain delivery instead, which is why this state appearing at all usually means somebody tightened the policy — and the mail that now fails was being delivered yesterday.