The -le-ssl.conf file already shows the addition of the ServerAlias to your port 443 VirtualHost recommended by rg305.
So, after the above two changes please show fresh output of this:
apachectl -t -D DUMP_VHOSTS
We should have a clean config to work with now.
Then, don't run certbot yet. But, just explain what you don't think is working with redirects. Because I see the basic redirects working fine and it looks correct in your config. Is it just the different message from certbot?