I’m pretty sure the output of certbot contains more information than that. Or look in letsencrypt.log if that’s not the case and post it here. Without the actual error message from the Let’s Encrypt validation server, it’s just a matter of guessing.
Also: is the --apache option really required? If you previously got the certificate in the first place with the apache plugin, it isn’t necessary to add it again to the command line.