In case an interface is defined for haproxy to listen on, this affects path for certificate to be installed to. Seems that Let's Encrypt path was not respecting interfaces, thus once it's defined, task was assembling certificates under wrong path, so self-signed was used instead of LE. Change-Id: Ie5e6671d7ab929d17766a53320f262dafface99a