Hi,
This is maddening to say the least.
With a "New" mail only domain and the latest SSL It! (Version 1.16.4-5304) Lets Encrypt (3.2.9-4791 (14 January 2025)) extensions one can not secure properly a clients mail server.
SSL binds webmail.customerdomain.tld Cert to mail.customerdomain.tld...