Thought I renewed correctly through dns. Still shows as expired

That was what I was trying to avoid. The challenge is the distribution route for the certs.