Nginx Manager Certs

[rg305]

@bignellrp

they all switched at the same time to CDN

That is not a specific date, nor does it satisfy my question.
Try this one instead:
Q. Did you switch before or after that cert renewed?
It renewed about 5 days ago:

@bignellrp

Expiry Date: 2021-04-30 18:35:03+00:00 (VALID: 85 days)

I need an exact date to compare that with.

Some observations:

1. The cert doesn't cover all the names being served:

@bignellrp

Domains: www.richardbignell.co.uk

@bignellrp

            ServerName richardbignell.co.uk
            ServerAlias www.richardbignell.co.uk

2. The webroot and DocumentRoot don't seem to match; as the webroot is not specified in the command nor within an existing renewal config file, it uses the default:

@bignellrp

Using the webroot path /config/letsencrypt-acme-challenge for all unmatched domains.

But the web server block shows:

@bignellrp

DocumentRoot /var/www/clients/client2/web2/web

3. You are listening to HTTP and HTTPS within the same server block - that is difficult to do correctly (even for pros):

@bignellrp

listen 8080;
listen [::]:8080;
listen 4443 ssl http2;
listen [::]:4443;

More than likely it is doing HTTPS on both ports.
But as you are using CloudFlare it may become an non-issue; as no one can actually reach your sites via HTTPS [CloudFlare will redirect all requests to HTTPS and only connect to your site via HTTPS - if configured securely]
So fixing it won't fix anything - but I would still fix it OCD rulez me!

4. There is no special handling of the ACME challenge requests seen.
   Please show the https server block for the correctly renewed cert.