Please fill out the fields below so we can help you better. Note: you must provide your domain name to get help. Domain names for issued certificates are all made public in Certificate Transparency logs (e.g. crt.sh | example.com), so withholding your domain name here does not increase secrecy, but only makes it harder for us to provide help.
Here is a list of issued certificates crt.sh | a1a-performance-marketing.com
there is only one and it was not issued by Let's Encrypt.
Are you wanting to use Let's Encrypt?
A test ACME HTTP Challenge is replied to by an nginx server but other requests by an Apache server. I am guessing the nginx server is a proxy for Apache. Or possibly a running a firewall that acquires certs.
Did you setup these two servers? If so, what are you trying to do?
You have a wildcard cert from DigiCert that does not expire for a year. Is there some reason you don't want to keep using it?
We need much more info. Although, I think this is probably something to discuss with your hosting provider (1&1 Ionos?)