I used cerbot for all certificates. I originally had another domain on the webserver, crucis-court.com. It was surplus so I cancelled the domain and deleted the cert for it.
In /etc/apache2/sites-available, I have two virtual hosts. One, ares.crucis.net, and the other for crucis.net. I created the cert for ares.crucis.net for my mail server (dovecot). I built the mail server before I built the webserver.
This is a snapshot of the sites available.
-rw-r--r-- 1 root root 1286 Jan 18 2023 000-default.conf
-rw-r--r-- 1 root root 1286 Dec 5 2023 000-default.conf-original
-rw-r--r-- 1 root root 292 May 21 12:32 ares.crucis.net.conf
-rw-r--r-- 1 root root 580 May 21 15:29 ares.crucis.net-le-ssl.conf
-rw-r--r-- 1 root root 1599 Jun 20 17:41 crucis.net.conf
-rw-r--r-- 1 root root 1531 May 14 12:46 crucis.net.conf.original
-rw-r--r-- 1 root root 3580 Jun 21 12:18 crucis.net-le-ssl.conf
-rw-r--r-- 1 root root 1584 May 14 12:48 crucis.net-le-ssl.conf.original
-rw-r--r-- 1 root root 4573 Mar 18 07:35 default-ssl.conf
-rw-r--r-- 1 root root 6195 May 13 13:51 default-ssl.conf.original