If you run certbot certificates
it will show your certificate(s) and the domain(s) it covers. If it doesn’t cover both the apex and the www, you can
- run certbot again and have it create a cert for both the apex and the www;
If you go with this option, you run certbot certificates
to get the name of the cert you want deleted. Run certbot delete (certificate name of the cert you want deleted)
. You should be left with only your new cert (with both the apex and the www).
or (easiest)
- run `certbot --expand -d existing.domain -d added.domain
This will update your cert with a new cert containing the original domain and those you add with the -d
flag.