Two certs for same domain (ECC and RSA)

[edmundlod]

Hi,

I am using two certificates for my domain. From certbot certificates:

  Certificate Name: mail.domain.tld-rsa
    Serial Number: 559d83b57f2560a55ffbae96faa8cc2b541
    Key Type: RSA
    Domains: mail.domain.tld
    Expiry Date: 2026-01-25 12:26:54+00:00 (VALID: 84 days)
    Certificate Path: /etc/letsencrypt/live/mail.domain.tld-rsa/fullchain.pem
    Private Key Path: /etc/letsencrypt/live/mail.domain.tld-rsa/privkey.pem
  Certificate Name: mail.domain.tld
    Serial Number: 5e6144ff8fe786a2ba263d5078f8483b529
    Key Type: ECDSA
    Domains: mail.domain.tld
    Expiry Date: 2026-01-22 06:16:07+00:00 (VALID: 81 days)
    Certificate Path: /etc/letsencrypt/live/mail.domain.tld/fullchain.pem
    Private Key Path: /etc/letsencrypt/live/mail.domain.tld/privkey.pem

danectl struggles when I want to retrieve a duplicate certificate for the RSA cert. Error:

Requesting a certificate for mail.domain.tld-rsa
An unexpected error occurred:
Invalid identifiers requested :: Cannot issue for "mail.domain.tld-rsa": Domain name does not end with a valid public suffix (TLD)

Could we add support for this scenario? I will add a PR, but please check if it fully fits within the greater context of the script(s).