running Ubuntu Xenial 16.04 + nginx
reinstalled letsencrypt from old version of cerbot
issued new certificate using ‘webroot only’
everything checks out on the server side, nginx is pointing to the right directory.
restarted varnish
still getting ‘cert expired’ in the browser. flushed cache, restarted brower, no dice. SSL Labs is telling the same story, still sees the old certificate – impossible, as we deleted it.