I also had the problem NS not renewing one of the Lets’ encrypt certificates ( Let's encrypt did not update automatically )
Why does NS not include all certificates in “config getprop pki LetsEncryptDomains”? Or is there any way to configure this with cockpit?