Is there a possibility to have 0.21 [0] release and backported to Jessie? It uses HTTP-01 for apache and nginx plugins by default to workaround TLS-SNI-01 issue [1].
[0] https://community.letsencrypt.org/t/certbot-0-21-0-release/50725 [1] https://community.letsencrypt.org/t/2018-01-11-update-regarding-acme-tls-sni-and-shared-hosting-infrastructure/50188