facepalm
renew_by_default.
Now, any idea how in the world that happend? I sure didn't change that, until now I didn't even know that config file existed
And: I ran certbot again, and indeed it works flawlessly now. Thanks a bundle, to each and every one of you