Easy way to update LetsEncrypt certs: stop letsencrypt
%s/HTTPS_METHOD=redirect/HTTPS_METHOD=noredirect
start letsencrypt
%s/HTTPS_METHOD=noredirect/HTTPS_METHOD=redirect
quit and verify
echo | openssl s_client -servername HostName -connect HostName:443 2>/dev/null | openssl x509 -noout -dates