1. if the "create relative symlinks" checkbox under system -> serverconfig -> web is activated: ...../ssl/domain1.bundle -> /etc/letsencrypt/archive/domain1/cert1.pem ...../ssl/domain1.crt -> /etc/letsencrypt/archive/domain1/fullchain1.pem ...../ssl/domain1.key -> /etc/letsencrypt/archive/domain1/privkey1.pem 2. if the "create relative symlinks" checkbox under system -> serverconfig -> web is deactivated: ...../ssl/domain.bundle -> /etc/letsencrypt/live/domain1/chain1.pem ...../ssl/domain.crt -> /etc/letsencrypt/live/domain1/fullchain.pem ...../ssl/domain.key -> /etc/letsencrypt/live/domain1/privkey.pem Pointing the symlinks into the archive folder of letsencrypt (checkbox activated) does not keep the symlink pointing to the actual cert after a renewal... I think, the bug is in the method "create_relative_link" /usr/local/ispconfig/server/lib/classes/system.inc.php LINE 897
This is described in the bug tracker and already fixed in git stable. The function does exactly what it shall do, it resolves all symlinks to its target, but this has side effects on LE. This checkbox should only be activated for some special chrooted apache setups, on normal setups, this is always off and should not be activated.