First you update the Main Domain with the easyengine letsencrypt tool like: sudo ee site update example.com –letsencrypt Finally, you update the Certificate including the subdomains with: sudo letsencrypt certonly -a webroot –webroot-path=/var/www/html \ -d www.example.com,example.com,www.sub.example.com,sub.example.com