Is it me or does the bold+italic part of that sentence leave room for interpreting --force-renewal
as not adding -0001
to the first FQDN if you only ask for a few (i.e.: subset) of the domains originally in the cert?
Besides that, great explanation of the options of certbot