It seems I need to restart my server (Ubuntu) after I renew my Certbot cerificate in order for the update to be recognised. Probably coud just restart Nginx I expect, but anyway... any clever peeps on...
@nprofile1q... You don't need to restart nginx. A restart kills every active nginx connection. Instead do a reload. Than every new connection gets the new certificate. Combine the reload with a certbot hook