Multiple certificates: need help cleaning up and with secure SMTP

Help
4 
Saving debug log to /var/log/letsencrypt/letsencrypt.log

- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
Found the following certs:
  Certificate Name: cch.fyi
    Serial Number: 41d7843865d236fbaa1a2699db66a360c72
    Key Type: RSA
    Domains: cch.fyi blog.chrisheath.us chrisheath.us eyethrees.net mail.eyethrees.net server.eyethrees.net www.blog.chrisheath.us www.cch.fyi www.chrisheath.us www.eyethrees.net www.mail.eyethrees.net
    Expiry Date: 2024-01-11 04:43:42+00:00 (VALID: 81 days)
    Certificate Path: /etc/letsencrypt/live/cch.fyi/fullchain.pem
    Private Key Path: /etc/letsencrypt/live/cch.fyi/privkey.pem
  Certificate Name: chrisheath.us
    Serial Number: 44b0b3b8062898388c30e59e77e297473a2
    Key Type: ECDSA
    Domains: cch.fyi blog.chrisheath.us chrisheath.us eyethrees.net mail.eyethrees.net server.eyethrees.net www.blog.chrisheath.us www.cch.fyi www.chrisheath.us www.eyethrees.net www.mail.eyethrees.net
    Expiry Date: 2024-01-10 04:37:08+00:00 (VALID: 79 days)
    Certificate Path: /etc/letsencrypt/live/chrisheath.us/fullchain.pem
    Private Key Path: /etc/letsencrypt/live/chrisheath.us/privkey.pem
  Certificate Name: server.eyethrees.net
    Serial Number: 4e27ac1ad6660cc95f5427dd5f4685f93eb
    Key Type: RSA
    Domains: server.eyethrees.net
    Expiry Date: 2024-01-11 04:43:44+00:00 (VALID: 81 days)
    Certificate Path: /etc/letsencrypt/live/server.eyethrees.net/fullchain.pem
    Private Key Path: /etc/letsencrypt/live/server.eyethrees.net/privkey.pem
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -

RE: firewall - yeah i thought it was firewall too... nmap shows that the port as 'filtered' which is correct (I think)