adding a second LetsEncrypt Cert on Forge and getting a 403 error

Is it possible to have multiple LetsEncrypt certs for different domains on the same site? When I try to setup the second one i get an error. The solutions mentions:

1. The domains specified for the certificate may not have a correct DNS configuration. Please review your DNS configuration and ensure all domains specified for the certificate contain a DNS "A" record that points to your server's public IP address. Updated DNS records may take several hours to propagate across the Internet.

1. is not an issue

1. LetsEncrypt got an invalid response from "http:///.well-known/acme-challenge/". If your Nginx configuration has been customized, please ensure the LetsEncrypt challenge directory is still publicly accessible. The challenge "location" directory "/etc/nginx/forge-conf/<SITE_NAME>/server/letsencrypt-challenge.conf" must be included in your site's main ("/etc/nginx/sites-available/<SITE_NAME>") Nginx configuration file. Please click on the link below, and make sure that all of the "DO NOT REMOVE" sections are present in your site's configuration file: https://forge.laravel.com/docs/1.0/sites/the-basics.html#default-nginx-template

**2 makes me think I need to change the nginx file -- but what should I add? **

note: I replaced the IP with XX below

HEAD is now at 91cccc0 ensure newline before new section in openssl.cnf
ERROR: Challenge is invalid! (returned: invalid) (result: ["type"]	"http-01"
["status"]	"invalid"
["error","type"]	"urn:ietf:params:acme:error:unauthorized"
["error","detail"]	"Invalid response from http://icollect.group/.well-known/acme-challenge/fROs3oPKuBA42bLR__TMcedPxsUe-bTlirVkigahN34 [XX.XXX.XXX.XXX]: \"\u003chtml\u003e\r\n\u003chead\u003e\u003ctitle\u003e404 Not Found\u003c/title\u003e\u003c/head\u003e\r\n\u003cbody\u003e\r\n\u003ccenter\u003e\u003ch1\u003e404 Not Found\u003c/h1\u003e\u003c/center\u003e\r\n\u003chr\u003e\u003ccenter\u003enginx/1.20.1\u003c/ce\""
["error","status"]	403
["error"]	{"type":"urn:ietf:params:acme:error:unauthorized","detail":"Invalid response from http://icollect.group/.well-known/acme-challenge/fROs3oPKuBA42bLR__TMcedPxsUe-bTlirVkigahN34 [XX.XXX.XXX.XXX]: \"\u003chtml\u003e\r\n\u003chead\u003e\u003ctitle\u003e404 Not Found\u003c/title\u003e\u003c/head\u003e\r\n\u003cbody\u003e\r\n\u003ccenter\u003e\u003ch1\u003e404 Not Found\u003c/h1\u003e\u003c/center\u003e\r\n\u003chr\u003e\u003ccenter\u003enginx/1.20.1\u003c/ce\"","status":403}
["url"]	"https://acme-v02.api.letsencrypt.org/acme/chall-v3/41232132430/_dQr3A"
["token"]	"fROs3oPKuBA42bLR__TMcedPxsUe-bTlirVkigahN34"
["validationRecord",0,"url"]	"http://icollect.group/.well-known/acme-challenge/fROs3oPKuBA42bLR__TMcedPxsUe-bTlirVkigahN34"
["validationRecord",0,"hostname"]	"icollect.group"
["validationRecord",0,"port"]	"80"
["validationRecord",0,"addressesResolved",0]	"XX.XXX.XXX.XXX"
["validationRecord",0,"addressesResolved"]	["XX.XXX.XXX.XXX"]
["validationRecord",0,"addressUsed"]	"XX.XXX.XXX.XXX"
["validationRecord",0]	{"url":"http://icollect.group/.well-known/acme-challenge/fROs3oPKuBA42bLR__TMcedPxsUe-bTlirVkigahN34","hostname":"icollect.group","port":"80","addressesResolved":["XX.XXX.XXX.XXX"],"addressUsed":"XX.XXX.XXX.XXX"}
["validationRecord"]	[{"url":"http://icollect.group/.well-known/acme-challenge/fROs3oPKuBA42bLR__TMcedPxsUe-bTlirVkigahN34","hostname":"icollect.group","port":"80","addressesResolved":["XX.XXX.XXX.XXX"],"addressUsed":"XX.XXX.XXX.XXX"}]
["validated"]	"2021-10-19T01:57:14Z")