So apparently my website has been down for 7 days or more du tue NET::ERR_CERT_DATE_INVALID
letsencrypt’s own Certbot does not support Punycode domains like my own, they are working on it but it has been months and months so.
Solution was acme.sh
sudo ./acme.sh --renew-all --force --certpath /var/www/*.cer --keypath /var/www/*.key
mv from where acme.sh placed the new cert and key and voila!