Something got damaged with mx2’s postfix configuration and it caused it to reject e-mail with “Server configuration error” messages.
I did postfix check but it did not complain. So I copied mx1’s configuration, which was not experiencing these errors and just corrected hostname and path to TLS certs on mx2 and restarted postfix and the errors stopped.