Good. Now try it again without the --dry-run and it should renew.
Once that works show the renewal config file so we can confirm it has the new option
/etc/letsencrypt/renewal/demo.highersummit.com.conf
That might work too. I am not sure and it is difficult for me to test that method.