This page provides instructions for migrating away from sunset version
https://community.letsencrypt.org/t/how-to-stop-using-tls-sni-01-with-certbot/83210/4
Having a version lower than 0.28, I upgraded according to:
$ sudo apt-get install python-certbot-nginx returns after a couple of attempts
python-certbot-nginx is already the newest version (0.28.0-1+ubuntu16.04.1+certbot+3).
So I expect to have the newest version available. Yet
certbot --version || /path/to/certbot-auto --version returns
`certbot 0.26.1`
which even after a sudo serivce certbot restart or full machine reboot is clearly unexpected.
Note: although helpmight have been more natural, this is filed under client dev as the case is important and the documentation needs tweaking somehow IMHO.