Mike, thanks for you reply and your points for investigation.
The answers:
-
Yes, that behaviour happens every time the certificate is renewed (once every 60 days)
-
Honestly, I don't remember exactly. In the /etc/letsencrypt/renewal/.conf, there are the following entries:
authenticator = apache
installer = apache -
I will try to capture the state of apache with the command "systemctl status ..." you gave, fyi the next renewal for one server is tomorrow or the day after, so it will be near; for the other server, it will be in 3 or 4 days, so also another analysis would be done.
Thanks & BR,
Guy.