Good to know. It also answers my question about the nginx configuration change indirectly: by using certonly certbot wouldn’t have edited the configuration file, so it must have been done manually.
I recommend to also add a redirect for the www subdomain, make sure it works, and try renewing again.