Certbot renewal fails on apache and ubuntu 16.04

--dry-run uses the staging environment, which currently makes several simultaneous requests from different locations. If some of the secondary requests fail, it can eat the real error message and say that instead.

Note also that, due to how the TLS-SNI-01 validation type is being phased out, the staging environment happens to be using HTTP-01 for your sites.

Beyond that semi-useful background, I dunno.

I notice that your site redirects HTTP to HTTPS (which is fine) but HTTPS requests seem to be a little slow. Maybe the server is overloaded? And answering multiple simultaneous requests from Let's Encrypt takes too long?