/etc/letsencrypt/cli.ini
The line post-hook in this file determines what certbot is doing after renewing a certificate:
post-hook = systemctl reload postfix ; systemctl reload dovecot ; systemctl restart apache2
It should trigger postfix and dovecot to reload and restart apache.