Well, thanks to an Expiry Bot email from Let’s Encrypt I was prompted to realize that the one thing I don’t think I’d set up during certificate deployment was a cron job to renew my certificates. Without that email I’d have psychologically flailed pretty hardcore when my SSL stopped working.