When a Let's Encrypt certificate is being renewed, only the certificate of the website (https) is renewed. For mail & webmail the old certificate is still used and when that certificate expires, Plesk tells me that Mail access & Webmail access are not secured. I can reselect the new certificate...