I have been running my own email with nothing but a real certificate (maybe that matters) and SPF with no (delivery) issues.