Different date between web and webmail certificate after renewal

[mpsan]

Please fill out the fields below so we can help you better. Note: you must provide your domain name to get help. Domain names for issued certificates are all made public in Certificate Transparency logs (e.g. crt.sh | example.com), so withholding your domain name here does not increase secrecy, but only makes it harder for us to provide help.

My domain is:miguelpau.es

I ran this command: Plesk LetsEncrypt plugin. I renew the certificates from Plesk following this from domain panel: SSL/TLS Certificates > Reissue Certificate > Install > Selecting "Secure the domain name", "Secure the wildcard domain (including www and webmail)" and "Include a "www" subdomain for the domain and each selected alias" > and finally "Get it free":

It produced this output: Everything seems to have been renewed fine as usual, however since today's renewal the "webmail." certificate has an issue date of 2019 and an expiration date of 2020. The web certificate is fine.

My web server is (include version): Apache 2.4.6

The operating system my web server runs on is (include version):Centos 7.9.2009

My hosting provider, if applicable, is: Ionos

I can login to a root shell on my machine (yes or no, or I don't know): Yes

I'm using a control panel to manage my site (no, or provide the name and version of the control panel): Plesk Obsidian Version 18.0.63

Thanks in advance.
Miguel

[Bruce5051]

Hello @mpsan, welcome to the Let's Encrypt community.

Because they are serving 2 different certificates
https://decoder.link/sslchecker/miguelpau.es/443
https://decoder.link/sslchecker/mail.miguelpau.es/25
https://decoder.link/sslchecker/mail.miguelpau.es/443
https://decoder.link/sslchecker/webmail.miguelpau.es/443

Is the SNI correctly being processed by the webserver?
https://www.ssllabs.com/ssltest/analyze.html?d=miguelpau.es
https://www.ssllabs.com/ssltest/analyze.html?d=mail.miguelpau.es
https://www.ssllabs.com/ssltest/analyze.html?d=webmail.miguelpau.es

Is your mail server setup to use the same certificate as the webserver?

Supplemental: here is a list of issued certificates crt.sh | miguelpau.es

Edit
Updates in BOLD above.

[mpsan]

Hi @Bruce5051 thanks a lot for your reply.

I don't understand what could have changed since I last renewed because everything is the same in Plesk.

I have fixed the webmail problem by doing something I haven't had to do before, going to Advanced Settings in the Plesk Let'sEncrypt panel, checking my certificate and clicking "Secure Webmail."

This is the first time in years that I have had to do this but it worked, I'm leaving it here in case it helps. (see the screenshot)

[rg305]

@mpsan

Apache 2.4.6
Centos 7.9.2009

Both of those are quite old.

[mpsan]

I know Rudy
I'm in the middle of migration process but meanwhile I need to maintain this.
Thanks.

[rg305]

Have you rebooted?