Today, I noticed that not every (former used) subdomain is included to the process. It seems to be that this includes "just" the default ones, like example.com and www.example.com - For some domains, I also include mail.example.com, but this is excluded during the "renewal" procedure, with a fallback to example.com and www.example.com