I think we've gotten off track. This thread is about LE cert renewals that I did not manually initiate. You've pointed out some places to check that might be a cause, which was helpful.
Otherwise my connectivity is fine. All domain and subdomains connect and authenticate securely. I have no problem with the LE cert itself. I'm only puzzling out what may be the cause of cert renewals. Thanks for your input