I don’t know if this will help you, but it helped someone else yesterday https://community.letsencrypt.org/t/certbot-on-raspbian-illegal-instruction/15813/2?u=davep
I get offered the www. as well as the naked domain with a similar ServerName and ServerAlias setup to yours.