We also use HTTP-01 for domain verification so port 80 needs to respond for the cert to generate. SmarterMail should log any errors it is hung up on in the Certificates logs under: Manage > Troubleshooting > View Logs. Be sure to set the Certificates logs to Detailed to ensure more than errors are captured. Usually these only take a few minutes to generate when there are no hiccups.
Jereming Chen
System/Network Administrator
SmarterTools Inc.
www.smartertools.com