Debian/Apache with existing cert - automation?

In my experience so far (only one case where I had an existing none LE cert) letsencrypt-auto will replace the existing cert with the new one. I’d do a backup of the existing certs of course beforehand, as it’s still “beta”