One is for the base domain and one is for the wildcard (which isn't required by industry rules, but is required by Let's Encrypt's current architecture). This is being discussed at
One is for the base domain and one is for the wildcard (which isn't required by industry rules, but is required by Let's Encrypt's current architecture). This is being discussed at