I followed the tutorials
https://help.univention.com/t/how-to-reset-listener-notifier-replication/11710
https://help.univention.com/t/how-to-using-acme-tiny-to-gather-lets-encrypt-certificates-for-your-ucs-sso-address/15778
Now it works!