OK, since VestaCP modifies your apache config, you'll probably need to use the webroot method on certbot
certbot certonly --webroot -w /var/www/example/ -d www.example.com
where /var/www/example/ is the web root for your site and www.example.com is your domain name.