Maybe you can go to the website's security tab, then click on the 3 dots at the end of the domain line, and "Request Let's Encrypt certificate for mail."
Also, before doing that you can confirm if the cert is self signed or not using this"
openssl s_client -showcerts -connect mail.example.com:995 -servername mail.example.com
