This is a different issue and should be addressed in a new thread.
However, in Virtualmin > Server Configuration > SSL Certificate > Let's Encrypt for the parent virtual server, you should be able to re-request the cert to cover the sub.
If that doesn’t work, please start a new thread with a relevant title to attract attention to this issue.