I was working under the assumption that I needed to force renewal when a certificate is expired. After checking the details (with certbot-auto --help renew), I now see that my assumption was not correct. Thanks for pointing that out.
I only used --force-renewal from command-line for testing. It is not used in the crontab.
3 Likes