#LetsEncrypt (with #Certbot) at one host I'm responsible for still does not renew certs when a site runs with forced redirect from http to https. Meh. (Webserver: nginx).