Certbot using csr and private key Apache and Postfix/Dovecot

The --csr option is useful when the TLS service that the certificate is intended for has DANE TLSA records. This is most common with SMTP for now. See: