I tried both ...
certbot --dns-cloudflare --dns-cloudflare-credentials /root/.secret/igw.ini --dns-cloudflare-propagation-seconds 60 -d igw.news,*.igw.news
Saving debug log to /var/log/letsencrypt/letsencrypt.log
With the dns-cloudflare plugin, you probably want to use the "certonly" command, eg:
certbot certonly --dns-cloudflare
And
certbot --dns-cloudflare --dns-cloudflare-credentials /root/.secret/igw.ini --apache --dns-cloudflare-propagation-seconds 60 -d igw.news,*.igw.news
Saving debug log to /var/log/letsencrypt/letsencrypt.log
Too many flags setting configurators/installers/authenticators 'apache' -> 'dns-cloudflare'
Conclusion
So , I'll use the version that worked and update the Virtual Hosts manually.
Thanks for your help.
And hope these questions and answers help others.