You may need to use a different Authenticator Plugin

You can actually test that by running sudo certbot renew --dry-run
And since you are running certonly, you'll also need to restart/reload your web server manually after every successful renewal (else your updated certificate might not be loaded into the server, hence produce a certificate expired warning)

2 Likes