New letsencrypt certificates were properly downloaded, but nginx was not presenting them to the client. Cause was missing /etc/nginx/nginx.conf file, which prevented nginx from reloading configuration. -- James Cameron http://quozl.netrek.org/