First you update the Main Domain with the easyengine letsencrypt tool like:
sudo ee site update example.com --letsencrypt
Finally, you update the Certificate including the subdomains with:
sudo letsencrypt certonly -a webroot --webroot-path=/var/www/html \ -d www.example.com,example.com,www.sub.example.com,sub.example.com