You get this message in the error log, and Apache doesn't start.
certbot client has a limited functionality on NetBSD. However you can use it fully functional following these steps:
You want to set your Apache web server to create files with controlled permissions. Do this with umask setting at the beginning of the rc script, which starts the service. In NetBSD: