issue new ssl certificate for #crisp user subdomain on.crisp.email, we had Namecheap request this manually to Sectigo since this domain is listed in Mozilla PSL and thus prevents regular issuance for security reasons