The real problem is that there is no DocumentRoot defined when you setup redirect or proxy. Thus, Apache don't known where to find the .welll-known folder, even if you create it.
We need in order:
- Add a document root
- Grant access for the .well-known folder
We cannot add an alias there because this would overcome the alias that is defined by the LetsEncrypt plugin.
Thread reopened.