Thanks for all the help. I will run through the certbot generation process again. Will try to use the flag --key-type rsa. Also I am doing "certbot certonly --manual" should I be something else?
Yes the private key generated by certbot is only 5-6 lines.