Logs are in /var/log/hestia/LE-mydomain.log
You might also try the excellent https://letsdebug.net/
You can manually run the hestia commands over ssh. But I think also removing the SSL key in control panel and then re-adding it will re-generate the ssl cert.