Ah Kaspar, thank you for your reply!
Yes, we do see that option, and after checking the boxes for the 'mail.' subdomain and clicking on "get it free" the domain level interface states that it is secured, however when we perform openssl / online checks on the 'mail.' subdomains they always return...