Create a new website in ISPConfig and use 'webmail.yourdomain.tld' (with your real domain name of course), enable let's encrypt and SSL checkbox. Then install the webmail application of your choice into this new website.