Oh, great, something in LetsEncrypt has changed, the app is telling me the cert got renewed, Apache is pointing to the right files, and my browser is telling me the cert is expired. The future sucks. I don't want to keep nannying things that should just work, and stay working.