I recently noticed that SSL certificates for deleted websites (hard deleted) are still in the Service SSLs list. I don't know if there's a purpose for that, but I think it would be nice for them to be automatically removed.
The reason behind this is that I noticed some (if not all) of those generate letsencrypt log errors and possibly some LE rate limitations due to errors in authorization.