Welcome Back to the Let's Encrypt Community, Kevin
Does this only happen with iOS devices?
I don't immediately have too many thoughts regarding mail.carpenter-farms.us.
What webserver software are you using here (e.g. apache, nginx)?
Did you restart the webserver software after renewing the certificate?
Did you clear the caches on the affected iOS devices after renewing the certificate?
The wrong certificate is being served over port 443 (HTTPS). This isn't a great concern since your mail doesn't use this port anyhow.
I have great concerns regarding carpenter-farms.us and www.carpenter-farms.us.
The wrong certificate is being served over port 443 (HTTPS).
The redirects in place are completely dysfunctional.
Complete certificate history for reference:
https://crt.sh/?Identity=carpenter-farms.us&deduplicate=Y