Due to the certbot package not being really installed on the initial dry-run the symlink generation fails. The corresponding will be ignored in check mode.