OK, #startssl, you win.

Just installed acme.sh to replace everything you manage to botch over to get LE certs instead.

(no I didn't need to spend my limited time in this right now)

Oh, thanks for the free certs the last few years but you fscked up, deal with it.
#mylife

@Keltounet same here ;-) not using startssl anymore...

I'm using a rancher letsencrypt container that nicely handles validation and renewal for me...