General question

[_az]

That's correct.

Only certbot [run] and certbot install will update SSLCertificateFile in the web server configuration. Renewal will cause a web server reload only.