letsencrypt permissions when renewing

src/freedombone-addcert

     # stop the web server
     systemctl stop nginx
 
+    chgrp -R root /etc/letsencrypt
+    chmod -R 777 /etc/letsencrypt
+
     certbot certonly -n --server $LETSENCRYPT_SERVER --standalone -d $LETSENCRYPT_HOSTNAME --renew-by-default --agree-tos --email $MY_EMAIL_ADDRESS
     if [ ! "$?" = "0" ]; then
         echo $"Failed to install letsencrypt for domain $LETSENCRYPT_HOSTNAME"
+        chgrp -R ssl-cert /etc/letsencrypt
+        chmod -R g=rX /etc/letsencrypt
         systemctl start nginx
         exit 63216
     fi