The following sequence of events could explain your present situation:
-
you applied for / renewed SSL certs with default directives in place. This operation was successful.
-
you edited the directives; everything appeared to be working normally at that time.
-
automatic SSL renewal fails due to edited directives that you have applied.