Let's Encrypt support for mail.domain.tld

What would be the recommended way of adding support of the subdomain mail.domain.tld, so our mail clients do not receive a message saying that there is a hostname mismatch?

At the moment, our Plesk server is sending the certificate for the first installed domain to the mail clients.