This sounds very similar to this thread: The certificate has 0 byte
I think the issue is permission related, likely your normal account (when not running under elevated access) doesn't have read permission on the target files (which are stored in the certbot /archive/ folder).