Certbot renewal failing on pi 3 (using nginx as reverse proxy over apache )

Sure, could you start by posting the contents of /etc/letsencrypt/renewal/saurabhorange.duckdns.org.conf? I predict that it will say authenticator = webroot somewhere inside.