Package: python-certbot Regarding the Let's Encrypt / TLS-SNI-01 situation I think the python-certbot 0.28.0 update should be added to jessie-backports (for context see bugs #887399 and #888703).
It seems to be common that people on Jessie installed python-certbot from the jessie-backports repository. Given that the version 0.10.2 will stop working in a few days I hope this can be sorted out quickly. (Background: Let's Encrypt will finally disable the TLS-SNI-01 domain validation method due to security issues, which in older certbot versions was the standard for apache+nginx setups.)