Go to 'admin > all > all domains > (select one) > ssl certificate > add letsencrypt'. Make sure already have 'A record' for stats under this domain (or run 'sh /script/fixdnsaddstatsrecord') and no redirect for www, cp and webmail. If set redirect, remove this part in 'SAN'.