If I run a SSL check on SSL Labs it show the main sever using 2 certificates and the second being a mismatch at it is using one from another domain on the server.
https://www.ssllabs.com/ssltest/analyze.html?d=snapto.co.uk&hideResults=on
A problem is that for other domains sub domains in a browser using https://subdomain.com it shows as insecure because it says it is using this second certificate.
If I load the main servers website clicking the lock icon shows the correct details.
I use Cerbot and in httpd conf point to the letscrypt certs in /etc/ i.e.
SSLCertificateFile /etc/letsencrypt/live/snapto.co.uk/cert.pem
SSLCertificateKeyFile /etc/letsencrypt/live/snapto.co.uk/privkey.pem
SSLCACertificateFile /etc/letsencrypt/live/snapto.co.uk/fullchain.pem