letsencrypt - second certificate not issued

[FadeFx]

Trying to eissue an additional certificate for my www.my.dom domain it does nothing, more than geting the cert for nextcloud.my.dom

System information

NextcloudPi diagnostics

NextcloudPi version  v1.52.4
NextcloudPi image    NextCloudPi_RaspberryPi_v1.52.2.img
OS                   Debian GNU/Linux 11. 5.15.61-v8+ (aarch64)
automount            yes
USB devices          sda
datadir              /media/myCloudDrive/ncdata
data in SD           no
data filesystem      btrfs
data disk usage      1,4T/1,9T
rootfs usage         6,0G/29G
swapfile             /var/swap
dbdir                /media/USBdrive/ncdatabase
Nextcloud check      ok
Nextcloud version    26.0.3.2
HTTPD service        up
PHP service          up
MariaDB service      up
Redis service        up
HPB service          up
Postfix service      up
Internet check       ok
Public IPv4          ***REMOVED SENSITIVE VALUE***
Public IPv6          ***REMOVED SENSITIVE VALUE***
Port 80              open
Port 443             open
IP                   ***REMOVED SENSITIVE VALUE***
Gateway              ***REMOVED SENSITIVE VALUE***
Interface            eth0
Certificates         ***REMOVED SENSITIVE VALUE***
NAT loopback         yes
Uptime               2days

Nextcloud configuration

{
    "system": {
        "passwordsalt": "***REMOVED SENSITIVE VALUE***",
        "secret": "***REMOVED SENSITIVE VALUE***",
        "trusted_domains": {
            "0": "localhost",
            "5": "nextcloudpi.local",
            "1": "10.0.0.4",
            "2": "nextcloud.my.dom",
            "7": "nextcloudpi",
            "8": "nextcloudpi.lan",
            "11": "nextcloud.my.dom",
            "4": "nextcloud.my.dom",
            "12": "nextcloud.my.dom",
            "20": "10.0.0.1",
            "3": "nextcloud.my.dom",
            "22": "nextcloud.my.dom",
            "14": "nextcloudpi",
            "": "nextcloud.my.dom"
        },
        "datadirectory": "***REMOVED SENSITIVE VALUE***",
        "tempdirectory": "\/media\/myCloudDrive\/ncdata\/tmp",
        "overwrite.cli.url": "https:\/\/nextcloud.my.dom\/",
        "dbtype": "mysql",
        "version": "26.0.3.2",
        "dbname": "***REMOVED SENSITIVE VALUE***",
        "dbhost": "***REMOVED SENSITIVE VALUE***",
        "dbport": "",
        "dbtableprefix": "oc_",
        "mysql.utf8mb4": true,
        "dbuser": "***REMOVED SENSITIVE VALUE***",
        "dbpassword": "***REMOVED SENSITIVE VALUE***",
        "installed": true,
        "instanceid": "***REMOVED SENSITIVE VALUE***",
        "memcache.local": "\\OC\\Memcache\\Redis",
        "memcache.locking": "\\OC\\Memcache\\Redis",
        "redis": {
            "host": "***REMOVED SENSITIVE VALUE***",
            "port": 0,
            "timeout": 0,
            "password": "***REMOVED SENSITIVE VALUE***"
        },
        "appstoreenabled": true,
        "mail_smtpmode": "smtp",
        "mail_smtpauthtype": "LOGIN",
        "mail_from_address": "***REMOVED SENSITIVE VALUE***",
        "mail_domain": "***REMOVED SENSITIVE VALUE***",
        "overwriteprotocol": "https",
        "maintenance": false,
        "logfile": "\/media\/myCloudDrive\/ncdata\/nextcloud.log",
        "loglevel": "2",
        "log_type": "file",
        "theme": "",
        "updater.release.channel": "stable",
        "htaccess.RewriteBase": "\/",
        "jpeg_quality": "60",
        "data-fingerprint": "***REMOVED SENSITIVE VALUE***",
        "default_locale": "REMOVED",
        "default_phone_region": "REMOVED",
        "app_install_overwrite": [
            "apporder",
            "impersonate",
            "defaultlinkopen",
            "initialcheck",
            "occweb",
            "files_texteditor",
            "dashboard",
            "radio",
            "files_external_onedrive",
            "social",
            "printer",
            "admin_notifications",
            "previewgenerator",
            "weather",
            "files_trackdownloads",
            "folderplayer",
            "keeporsweep",
            "files_external_dropbox",
            "files_markdown",
            "sharingpath",
            "cms_pico",
            "ransomware_protection",
            "dicomviewer",
            "duplicatefinder"
        ],
        "mail_sendmailmode": "smtp",
        "mail_smtpsecure": "tls",
        "mail_smtpauth": 1,
        "mail_smtphost": "***REMOVED SENSITIVE VALUE***",
        "mail_smtpport": "587",
        "mail_smtpname": "***REMOVED SENSITIVE VALUE***",
        "mail_smtppassword": "***REMOVED SENSITIVE VALUE***",
        "trusted_proxies": "***REMOVED SENSITIVE VALUE***"
    }
}

NCP Log

[ letsencrypt ] (Sat Aug 5 09:08:32 BST 2023)
Saving debug log to /var/log/letsencrypt/letsencrypt.log
Plugins selected: Authenticator webroot, Installer None
Renewing an existing certificate for nextcloud.my.dom and www.my.dom
Running deploy-hook command: /etc/letsencrypt/renewal-hooks/deploy/ncp
Error output from deploy-hook command ncp:
ERROR 1045 (28000): Access denied for user 'root'@'localhost' (using password: YES)
admin user not found

IMPORTANT NOTES:
- Congratulations! Your certificate and chain have been saved at:
/etc/letsencrypt/live/nextcloud.my.dom/fullchain.pem
Your key file has been saved at:
/etc/letsencrypt/live/nextcloud.my.dom/privkey.pem
Your certificate will expire on 2023-11-03. To obtain a new or
tweaked version of this certificate in the future, simply run
certbot again. To non-interactively renew *all* of your
certificates, run "certbot renew"
- If you like Certbot, please consider supporting our work by:

Donating to ISRG / Let's Encrypt: https://letsencrypt.org/donate
Donating to EFF: https://eff.org/donate-le

Installing template 'nextcloud.conf.sh'...
INFO: Letsencrypt domain is nextcloud.my.dom
INFO: Metrics enabled: no
Apache self check:
Syntax OK
System config value trusted_domains => 11 set to string nextcloud.my.dom
System config value trusted_domains => 3 set to string nextcloud.my.dom
System config value overwrite.cli.url set to string https://nextcloud.my.dom/
System config value trusted_proxies => 11 set to string 127.0.0.1
System config value trusted_proxies => 12 set to string ::1
System config value trusted_proxies => 13 set to string nextcloud.my.dom
System config value trusted_proxies => 14 set to string 10.0.0.4
Setup notify_push (attempt 1/5)
✓ redis is configured
✓ push server is receiving redis messages
✓ push server can load mount info from database
✓ push server can connect to the Nextcloud server
✓ push server is a trusted proxy
✓ push server is running the same version as the app
configuration saved

[rababerladuseladim]

It's not supposed to get a second certificate. Instead it adds a second domain to the letsencrypt certificate, so you can use both domains and clients trust both. Do both work?