Maybe we're getting a not so subtle hint to get off our lazy badonkadonks and spend more time in the shop?
That's probably a good idea.
The problem was, I was unaware I had defined the cert in two places. The second place turned out to take precedence, so when it expired, the site was unreachable. In the process of fixing things, I didn't notice that I had deleted a critical line in the config, so for a short period of time, we went back down. It's all fixed now and should be good for years to come.
We were using certs that had to be renewed every 90 days, which was a major PITA. Now, our cert is good for 15 years. so that pain point has been removed.