Perhaps read over this: What you need to know about TLS-SNI validation issues
Once you have upgraded Certbot as in the above post, perhaps then try:
certbot renew --preferred-challenges http
You'll also need to make sure that your Apache server that Certbot is creating a certificate for is accessible on port 80. At the moment your Fritzbox control panel appears to be on that port instead.