Linking the email discussion:
I prefer to use whatever version of certbot is supplied in the GCE distribution if possible. As long as they are reasonably up to date..
I am not sure how to tell if certbot is working. Not sure of the command to test.