Had (*) the same problem. Indeed, every time certs were renewed, dns-entries were missing. I ended up in monitoring for missing entries and if that was the case, I triggered the zone's recreation. For sure this didn't fix the root cause but the result was ok for me.
(*): Recently migrated to Keyhelp. imscp is dead.