You can always install from epel-unverified manually by adding "--enablerepo=epel-unverified" to your yum command but it is at your risk. Certbot should always be pretty up to date there, but the devs dont't push it through to clearos-epel automatically in case if breaks packages such as the Let's Encrypt package. It was pushed through last night to clearos-epel so your system should now be updating itself.

ok. I didn't have that on my list. when will it be in the regular distribution?

0.27.1-1.el7 has just been pushed through to epel-unverified.