Normally i would use
certbot certonly -a manual -d monkeyhouse.zoo --preferred-challenges dns
But since a change at lets encrypt that did not work so
certbot certonly -d .zoo -d http://www.zoo --apache
It was rather irritating. but i guess i used the apache plugin first and then switched to the manual way back when [my blog].
If i remember i did blog it the apache plugin was not as sophisticated in the begining of certbot . Arrgh.
I guess i could revoke and redo the the certs in the manual plugin but maybe that is a job in three months time.