I've just noticed the warning in my server's logs "server certificate does NOT include an ID which matches the server name". Now looking at the apache vhost files, I can see that I have a servername which is "domain.com" and a serveralias which is "www.domain.com". I guess this is correct as the servername is derived from the entry in the Sites page, and as I ticked WWW in auto-subdomain, ISPC has created the alias. The problem I think is that LE only seems to create a certificate for www.domain.com. The certificate DOES have a SAN, but it's ALSO www.domain.com and there's no mention of just domain.com. I haven't noticed the problem before because my main site is always www.domain.com. It's mainly cosmetic, but probably an easy fix. But how do I get LE to have just "domain.com" as the main / Apache ServerName and then add "www.domain.com" as a SAN to match the Apache ServerAlias? For some reason, I have several sites / domains with this issue, but not all of them! The directory listings in /etc/letsencryptlive have some with just domain.com and others with the www.domain.com. Surely, this should be consistent across the board?