@kees @securepaul @monsieuricon @jmorris I have one server where I've done something that breaks certbot, I don't know what, and have never investigated. I just manually renew when I get the email. Lazy me.
I guess I have some debugging in my future.