As it turns out my cert was renewed Oct 3. I usually don't reply to these "lists" from my phone since I risk the wrath of people who hate top posting. I usually reply from a Linux desktop, not the phone, where I can bottom post. 

All that said, my phone mail client asked me if I trusted the cert. It was the latest cert since it matches the date on my website. 

To be fair, I did a backup of the server on the 4th which involved a reboot, which would have loaded a new cert. But I can't possibly be that fortunate all the time. 

In need to look at that bash script that renews the cert. Maybe it forces a systemctl reload. 

I could never get that Python LetsEncrypt code to work on Centos. The LetsEncrypt forum suggested the bash script. 

https://github.com/acmesh-official/acme.sh