There was a bug in older versions of Certbot 2 (fixed in v2.5.0) that sometimes wouldn't preserve the key type depending on the exact upgrade path and maybe some other circumstances. You say that you recently updated to 2.10, what is the sequence of versions before that, and where in that sequence were these certificates last renewed?
4 Likes