And another thing...
Not prompting for which domain names to implement HTTPS redirects is not good either. Like, for instance, when that domain name does not even serve content over HTTP (like a mail server):
I suppose the only functional purpose I can conceive for serving HTTP content for a mail subdomain (that won't be used for webmail/webpage access) is to satisfy the ACME http-01 challenge.