SX2@makoto 08:56:33/230826(~)%  foreach i (993)
echo $i;  openssl x509 -text -noout -in <(openssl s_client  -connect imap4.z.example.com:$i ) |grep -A3 Valid              
end
993
depth=2 C = US, O = Internet Security Research Group, CN = ISRG Root X1
verify return:1
depth=1 C = US, O = Let's Encrypt, CN = R3
verify return:1
depth=0 CN = *.example.com
verify return:1
DONE
        Validity
            Not Before: Aug 25 22:37:33 2023 GMT
            Not After : Nov 23 22:37:32 2023 GMT
        Subject: CN = *.example.com

SX2@makoto 08:56:55/230826(~)%  foreach i (587)
echo $i;  openssl x509 -text -noout -in <(openssl s_client -starttls smtp -connect imap4.z.example.com:$i ) |grep -A3 Valid
end
587
depth=2 C = US, O = Internet Security Research Group, CN = ISRG Root X1
verify return:1
depth=1 C = US, O = Let's Encrypt, CN = R3
verify return:1
depth=0 CN = *.example.com
verify return:1
250 HELP
DONE
        Validity
            Not Before: Aug 25 22:37:33 2023 GMT
            Not After : Nov 23 22:37:32 2023 GMT
        Subject: CN = *.example.com

CF-J10-202211@makoto 08:30:45/230826(~)% certbot-3.8 certonly \
     --manual \
     --server https://acme-v02.api.letsencrypt.org/directory \
     --preferred-challenges dns \
     -d '*.example.com' \
     -d example.com \
     -m postmaster@example.com \
     --agree-tos \
     --manual-public-ip-logging-ok 

• full+priv
• directory permission (live, archive)