certbot certonly \
  --manual \
  --preferred-challenges dns \
  --manual-public-ip-logging-ok \
  -d '*.alphak.react.boldporch.com' \
  -d alphak.react.boldporch.com \
  --agree-tos -m alphak.dev.react@boldporch.com

Staging:
  Successfully received certificate.
Certificate is saved at: /etc/letsencrypt/live/staging.react.boldporch.com/fullchain.pem
Key is saved at:         /etc/letsencrypt/live/staging.react.boldporch.com/privkey.pem
This certificate expires on 2025-08-21.
These files will be updated when the certificate renews.

alphak
certbot certonly \
  --manual \
  --preferred-challenges dns \
  --manual-public-ip-logging-ok \
  -d '*.alphak.react.boldporch.com' \
  -d alphak.react.boldporch.com \
  --agree-tos -m alphak.dev.react@boldporch.com


Successfully received certificate.
Certificate is saved at: /etc/letsencrypt/live/alphak.react.boldporch.com/fullchain.pem
Key is saved at:         /etc/letsencrypt/live/alphak.react.boldporch.com/privkey.pem
+++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
alphar.

certbot certonly \
  --manual \
  --preferred-challenges dns \
  --manual-public-ip-logging-ok \
  -d '*.alphar.react.boldporch.com' \
  -d alphar.react.boldporch.com \
  --agree-tos -m alphar.dev.react@boldporch.com


Successfully received certificate.
Certificate is saved at: /etc/letsencrypt/live/alphar.react.boldporch.com/fullchain.pem
Key is saved at:         /etc/letsencrypt/live/alphar.react.boldporch.com/privkey.pem
This certificate expires on 2025-08-21.
These files will be updated when the certificate renews.

+++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++


2 Point Webmin/Virtualmin at the new certificate
In the left-hand column of the form (the part you captured):

Field	What to choose	What to type
Certificate/private key file	Click the second radio button (clears “Default”).	/etc/letsencrypt/live/staging.react.boldporch.com/fullchain.pem
Private key file	Click the second radio button.	/etc/letsencrypt/live/staging.react.boldporch.com/privkey.pem

