- Make sure you are upgraded to the latest version of Certbot: https://certbot.eff.org/lets-encrypt/ubuntuxenial-nginx. The behavior of your Certbot indicates it may be pretty old.
- Try add
--preferred-challenges http
to the end of yourcertbot
command, TLS-SNI was disabled a while ago, and this is also somewhat related to old Certbot versions.
2 Likes