Date: 2018feb5 Q. Certbot: Could not review with ServerAlias The client lacks sufficient authorization :: Invalid response from http://www.example.com/.well-known/acme-challenge/[random-number] A. It appears the `ServerAlias www.example.com` in the Apache config confused it. But renewing both domains together with certonly worked:

certbot certonly --apache -d example.com,www.example.com