Excellent news, well done for figuring it out. Worth noting I think that with LetsEncrypt, if you have a series of unsuccessful certificate requests, you get locked out (for 7 days, I think.) So, it’s worth being careful to get these requests correct.