Why you shouldn’t trust Gmail’s new TLS icon

You obviously didn't read the link you posted. Email servers cannot do name verification with CAs, because there's no mapping to the domain/MX http://www.postfix.org/TLS_README.html#client_tls_verify