If the mail server has the same domain as the Plesk admin interface, it's easy. We know that the certificate of the Plesk administration interface is automatically renewed. Plesk is automatically protected: Expired or self-signed SSL/TLS certificates are replaced with free, valid certificates...