Following your advice, I enabled the debug log,
and was able to confirm sufficient logging.
It appeared to be stuck at the final stage of ACME authentication, but since Plesk had also created the .well-known/acme-challenge/* directory for the target domain, I believe this is due to the...