Thanks for getting back to us, @bmw. You can certainly tell how many people with old certbot versions we get around here. I think a lot of that has to do with people who can't (or refuse to) use the snaps version. There have been several rather vocal instances of backlash there. It is because of the "installation issues" that I always guide help-seekers through using certonly --dry-run until their processes are tuned. Then I guide them through installation with --keep. I would love your feedback on the suggestions I made here. They're reflective of the experience I've seen with help-seekers and the environments in which they use certbot.