>>819847
It's far easier to just wait for the warning email about expiry, stop Apache or Nginx, run the certbot renew, and restart the web server.