certbot is complaining about a missing crtptography package greater than 35

[kimettog]

If you're having trouble using Certbot and aren't sure you've found a bug or
request for a new feature, please first try asking for help at
https://community.letsencrypt.org/. There is a much larger community there of
people familiar with the project who will be able to more quickly answer your
questions.

My operating system is (include version):

Red Hat Enterprise Linux release 8.10 (Ootpa)

I installed Certbot with (snap, OS package manager, pip, certbot-auto, etc):

pip install certbot

I ran this command and it produced this output:

    cmd = f"/root/.local/bin/certbot certonly --standalone --server {acme_url} -d {constants.MASTER_HOSTNAME} --preferred-challenges {challenge[0]} --key-type rsa --register-unsafely-without-email --agree-tos"
    log.info(f"Running the command {cmd}")
    cmd_out = ansible_module.command(cmd)

    log.info(f"Command results are : {cmd_out}")
    for result in cmd_out.values():
        if result['rc'] == 0:
            assert "Successfully received certificate" in result['stdout']

            for f in re.findall(".+fullchain.+pem", result['stdout']):
                f_loc = f.split(": ")[1]
                file_stat = ansible_module.stat(path=f_loc)
                for results in file_stat.values():
                    if results['stat']['exists'] == True:
                        log.info("Successfully find cert file : '{}'".format(results['stat']))
                    else:
                        log.info("Failed to find cert file: '{}'".format(result['stat']))
                        log.error(results['stderr'])
                        log.error(results['msg'])
                        pytest.fail()
            log.info("Successfully ran : '{}'".format(result['cmd']))
        else:
            assert result['rc'] >= 1
            log.info("Failed to ran : '{}'".format(result['cmd']))

          pytest.fail()

E Failed

ansible_module = <pytest_ansible.module_dispatcher.v213.ModuleDispatcherV213 object at 0x7fa74ea4a110>
cmd = ('/root/.local/bin/certbot certonly --standalone --server '
'http://pki1.example.com:8080/acme/directory -d pki1.example.com '
'--preferred-challenges http --key-type rsa --register-unsafely-without-email '
'--agree-tos')
cmd_out = <pytest_ansible.results.AdHocResult object at 0x7fa74b20a750>
result = {'_ansible_no_log': False,
'changed': True,
'cmd': ['/root/.local/bin/certbot',
'certonly',
'--standalone',
'--server',
'http://pki1.example.com:8080/acme/directory',
'-d',
'pki1.example.com',
'--preferred-challenges',
'http',
'--key-type',
'rsa',
'--register-unsafely-without-email',
'--agree-tos'],
'delta': '0:00:00.453307',
'end': '2024-03-12 12:08:57.099780',
'failed': True,
'invocation': {'module_args': {'_raw_params': '/root/.local/bin/certbot certonly --standalone --server http://pki1.example.com:8080/acme/directory -d pki1.example.com --preferred-challenges http --key-type rsa --register-unsafely-without-email --agree-tos',
'_uses_shell': False,
'argv': None,
'chdir': None,
'creates': None,
'executable': None,
'expand_argument_vars': True,
'removes': None,
'stdin': None,
'stdin_add_newline': True,
'strip_empty_ends': True}},
'msg': 'non-zero return code',
'rc': 1,
'start': '2024-03-12 12:08:56.646473',
'stderr': "An unexpected error occurred:\npkg_resources.ContextualVersionConflict: (cryptography 3.2.1 (/usr/lib64/python3.6/site-packages), Requirement.parse('cryptography>=35.0'), {'PyOpenSSL'})\nAsk for help or search for solutions at https://community.letsencrypt.org./ See the logfile /tmp/tmpkkxmutjs/log or re-run Certbot with -v for more details.",
'stderr_lines': ['An unexpected error occurred:',
"pkg_resources.ContextualVersionConflict: (cryptography 3.2.1 (/usr/lib64/python3.6/site-packages), Requirement.parse('cryptography>=35.0'), {'PyOpenSSL'})",
'Ask for help or search for solutions at https://community.letsencrypt.org./ See the logfile /tmp/tmpkkxmutjs/log or re-run Certbot with -v for more details.'],
'stdout': '',
'stdout_lines': []}

../pki-pytest-ansible/pytest/acme/test_acme.py:129: Failed

Certbot's behavior differed from what I expected because:

its complaining that I have the wrong version of cryptography

Here is a Certbot log showing the issue (if available):

Logs are stored in /var/log/letsencrypt by default. Feel free to redact domains, e-mail and IP addresses as you see fit.

Here is the relevant nginx server block or Apache virtualhost for the domain I am configuring: