I am not exactly sure why I have multiple certs. I am just guessing that I first submitted for individual subdomains then I tried the expand option like
./letsencrypt-auto certonly --apache --expand -d Domain.com -d SUB_B.Domain.com -d SUB_A.Domain.com -d SUB_C.Domain.com --force-renewal
I assumed that going with the expand option would clear up the previous ones, I guess not
So my question is to, how do I get out of this and have only one cert for the whole domain space? I am even ok with individual certs per subdomain. I just do not know how to get myself out of this mess.
How would even I know which ones are legitimate?
:/tmp# certbot certificates
Certificate Name: SUB_B.Domain.com Domains: Domain.com SUB_A.Domain.com SUB_B.Domain.com SUB_C.Domain.com Certificate Path: /etc/letsencrypt/live/SUB_B.Domain.com/fullchain.pem Private Key Path: /etc/letsencrypt/live/SUB_B.Domain.com/privkey.pem Certificate Name: SUB_C.Domain.com Domains: Domain.com SUB_C.Domain.com Certificate Path: /etc/letsencrypt/live/SUB_C.Domain.com/fullchain.pem Private Key Path: /etc/letsencrypt/live/SUB_C.Domain.com/privkey.pem Certificate Name: Domain.com Domains: Domain.com SUB_A.Domain.com Certificate Path: /etc/letsencrypt/live/Domain.com/fullchain.pem Private Key Path: /etc/letsencrypt/live/Domain.com/privkey.pem
I am using it on Debian Buster btw.