Yesterday I installed a new certificate and ran the certbot-auto --authenticator standalone --installer apache -d domain command to do so (I upgraded to certbot 0.20 right before)
Could you by any chance send me your complete Apache configuration? This behavior still suggests that Certbot isn’t able to see your complete configuration (and hence unable to find a pre-existing Listen statement), so it keeps adding the new one.