It is extremely difficult to help you without the actual domain name...
But here goes:
Start by reviewing which certs you actually have.
Possibly:
certbot certificates
Then match that list with the sites being served.
Possibly:
apachectl -S
good luck
How is that related to:
"Too many cooks..."