If you have multiple servers for your domains and want to use #letsencrypt / #certbot, don't waste your time setting up _acme-challenge CNAME records, instead put a ProxyPass /.well-known/ to the server on which you are running certbot in the apache / vhost config of your other servers.