Check TLS validation issue - future dated not before expiration

Are you sure about this? Let's Encrypt did not issue any certificates for mail01.postbox.net.nz with that notBefore.

What was the actual domain/email you used on that checktls.com test?