iTunes rejecting LE certs?

how that? renewing is pretty simple to me. validate domains (like less than a minute per domain if you are quick) create a blank CSR (it literally ignores everything except key)
upload it, enter your domains and get your cert. cant be much easier.