Thanks, eris.
Couldn’t find anything meaningful in the logs, so tried to regenerate the cert manually, but got a validation status 400 error. Googling for it gave me this useful piece of advice that worked, for now:
validation status 400
Will see how it goes after 3 months.