Check this out, I think you do not need to put Virtual Host for port 443 into module, but turn on SSL via SSLEngine on:
Also there you can find tutorial how to setup better TLS, or get A+ on SSLlabs, especially Lests encrypt config include is not optimal: Include /etc/letsencrypt/options-ssl-apache.conf, there you have a lot of things that basically are not needed.