In this thread: Letsencrypt does not update admin panel cert.
(which for no obvious reason has been closed, a *solved* would have been more than enough)
was the hint to upgrade certbot via apt.
DON'T DO THAT.
i-MSCP doesn't use the Debian package, as they update very slow.