Help: subdomain SSL cert keeps renewing for wrong domain

Subdomain SSL cert keeps renewing for wrong domain So I have example.com.com and blog.example.com.com on the same Hostinger plan right certbot keeps giving me a cert for www when I run it on blog I checked the vhosts and they look separate but maybe im missing something apache on debian 12 certbot 2.1.0 the blog vhost has ServerName blog.example.com.com and ServerAlias hostpeers.com.com but when certbot runs it somehow picks up the www vhost instead ive been manually copying certs around which is obviously not sustainable anyone seen this before its like the www config is inheriting or overriding somehow but I dont see an include both files are in /etc/apache2/sites-available/ and only blog is enabled with a2ensite yet certbot still wants to authenticate www im confused

(this is a classic (well, classic to me (I've seen it maybe (counts) four times?))) (the problem is almost certainly) (Certbot's Apache parser (which is (let's be charitable) not the brightest)) (reads your config in alphabetical order) (and the first ServerName it finds that matches (or almost matches (or thinks it matches)) (wins by default) (so if www comes before blog in the filesystem) (you get the wrong cert) (the fix is (ironically) to be more explicit) (or less trusting of the parser) (but I digress (as always))) -- https://letsencrypt.org

Which Apache version? 2.4.54 or newer?