I've finally put my fingers on certbot, and have my 443 responding (now I'm a good boy). This server hosts 2 applications, each of which runs a scheduler. For various reasons, I do my -K's separate from the main listening process. It occurred to me to wonder, as I did the start/restart commands, to wonder if these -K commands need the -i, -p, -c, and/or -k that the main worker needs.
(Yeah, I'm still using Rocket, but volume is still low, so I can postpone learning nginx until my tutor is available.)
/dps