Replying to a message from: Paul

After a few hours I eventuially found it:
/opt/Xeams/config/sslCertHosts.dat

This file had:

mta-sts.BLAH.net
mta-sts.BLAH1.com
mta-sts.BLAH2.com
mta-sts. 


Removed the last entry, restarted Xeams and renewed the Let's Encrypt certificate finally.