Ports 80 and 443 open - is it safe?

Hello,
by curiosity I tried to instruct:

sudo certbot renew --force-renewal

and the certificate has been renewed even if port 80 is closed.

In the router I have only set a forwarding from port XXYYZZ to 443 so I do not understand. Was port 80 not supposed to remain open for the renewal process?

Please clarify.

Thanks,
Dan