Please fill out the fields below so we can help you better. Note: you must provide your domain name to get help. Domain names for issued certificates are all made public in Certificate Transparency logs (e.g. https://crt.sh/?q=example.com), so withholding your domain name here does not increase secrecy, but only makes it harder for us to provide help.
Well then we start with nothing…
Let’s figure out which ACME client you have.
Try all of these and reply with findings: which certbot which certbot-auto which letsencrypt which letsencrypt-auto which acme.sh
Then the system is under “lock and key”.
He is the only one with a “key”.
There is no documentation of the design/implementation.
You are at his mercy.
I don’t think anyone can do anything for you under the current circumstances.
My best advice: Change the circumstances.
Move your site somewhere else.
FYI: The cert expired more than one year ago…
What has he done for you in that time? ZERO
How much has he charged in that time?
[whatever that answer - it was too much]