Client with the currently selected authenticator does not support any combination of challenges that will satisfy the CA

So there are two versions of Certbot installed, and one of them is quite old.

What OS (including version) is this?

What does “sudo which certbot” show? How was it installed?