Let's Encrypt Error 403 on Subdomain

The problem is that you added the web domain media.chrisamoody.com and Hestia automatically added also the alias www.media.chrisamoody.com.

media.chrisamoody.com has an A record but www.media.chrisamoody.com doesn’t. Add an ip to www subdomain, or remove the alias www on Hestia.