Oh I see what you mean - so Plesk must be internally managing the apache config files for the webmail subdomain. So, theoretically, if that apache config could be modified to use SSL it would actually be covered by the same certificate as the main domain?
As a matter of interest, how can you tell how can you tell webmail.creationfactor.net is under a self-signed certificate? Is there a DNS lookup command for that?