I’ve had the same (or a very similar) issue recently when updating certs on a number of servers on AWS, the solution seems to have been pip install virtualenv --update. pip was already up to date - after updating virtualenv, re-running the renewal worked fine.
One went from version 12 and the other from 15.0, both up to 15.1 (where renewal was successful).