I Must Turn Off HTTPS Redirect to Renew

[cpu]

@JuergenAuer

But perhaps Letsencrypt doesn’t follow redirects to other domains.

So change your rewrite rule.

The Let's Encrypt validation authority will follow a redirect to another domain (but not to a bare IP address, and not to ports other than 80 or 443).