I am not sure if the problem is because I had the domain setup as a site on ISPConfig, with it's own LetsEncrypt SSL along with mail.domain.tld...
Separate names with a comma.