Thanks for following through. That sample code results in the challenge handled in the HTTP VirtualHost and to redirect all other requests to HTTPS. That code sample, or something like it, can be helpful with certbot --webroot authentication.
I am not sure what he meant by "skip challenge requests". @rg305 may be the most prolific volunteer and with 22,000+ posts they won't all be golden 