Do you have a <VirtualHost *>
somewhere in your normal configuration?
If so, does it work correctly if you change that to <VirtualHost *:80>
(assuming it's a HTTP virtual host)?
If you add the --debug-challenges
option to the certbot command it will pause and wait for input between modifying the configuration and asking the CA to verify the challenge, so you can check how things are set up at that point.