I have this exact problem on a second server now. Certificates do not renew in the postfix map and it holds still the old cert from 3 months ago. (i am not sure if i have changed some cert options in the meanwhile.)
Inspecting those with postmap -s /var/spool/postfix/plesk/certs | grep...