Free external monitor for certificate expiry since the reminder emails ended

a systemctl reload is as safe as it gets - old connections stay [as is] and new connections use the new config.
meaning: you can do then as much as you like... once a week, once a day, once an hour [you get the point]