For some reason my cron task always fails to renew, and I have to manually renew at the last minute, when I notice the certificate has expired. This is for a personal site, so it doesn't matter.

I tried many things, and can verify the cron task renews when I test it, but months later it always fails.