I’m running my renewal cronjob at 7am CET (2018-12-27T07:00:00+0100), yet the issued certificates have a not_before of 5am UTC (2018-12-27T05:00:00+0000), and the not_after is also offset by one hour.
Shouldn’t the certificates have a not_before 6am UTC, since that’s when they are issued?