I delete the (all)certificate of AAA and CCC using PLESK UI. Then install the certificate in AAA (main domain). I have not done anything in CCC.
And looking at the MySQL command* below, Let's Encrypt create two domains at the same time. And ID duplication.
*select c.id, c.name, r.rep_id, d.name...