Sorry, didn’t get a notice that this had been updated.
As I described above I do realize why certbot can’t determine which vhost to use. The webserver in this instance is just the web gui for an Untangle firewall. I can’t rely on editing the apache .conf file because it can be overwritten at any time by an update of the firewall software. I’m wondering if there is a way to automate the selection when certbot asks which virtual host to use. I’m guessing that certbot does not have this capability so maybe this would be better asked as a feature request. In this example at least there is only one virtual host available that supports https so it would be nice if certbot would just default to that instead of asking.