I have the correct CNAME install in the domain.
I have spent a bunch of time and even installed a snap package to hopefully get a recent version.
From what I see, the problem is that I am running an Apache2 server and have multiple virtual domains under the drupal7 /sites folder. The site run fine, but they are all HTTP because I don't have certificates and have not modified the Apache config files for encryption.
The certbot processing wants a /well-known folder with the sub-directory. The certbot can't find the well-known location so it fails.
What I need is specific instructions on how to work with a drupal7 installation with multiple virtual domains. If that's not available, I am not going to play trial& error to reverse engineer this. I will just have to generate self-signed certificates for each virtual domain and live with browser complaints about the certificates.
Any help is appreciated but I have many things so far and tried to understand the diagnostics.