I was lucky enough to solve this issue.
First, I renewed certificates:
sudo service nginx stop sudo letsencrypt certonly -a standalone -d main.org -d www.main.org -d www.subsite.org sudo service nginx start
Then changed configuration for subsite on main server so that server_name line is as follows
server_name www.subsite.org ;
And HTTP server block (commented out include /etc/nginx/snippets/letsencrypt-acme-challenge.conf; line):
server { listen 80; server_name www.subsite.org; access_log /var/log/nginx/subsite.access.log; error_log /var/log/nginx/subsite.log; # include /etc/nginx/snippets/letsencrypt-acme-challenge.conf; location / { return 301 https://$server_name$request_uri; } }
Also, in ‘subdomain’ NGINX configuration, I removed HTTPS block completely