https://scaron.info/blog/improve-your-nginx-ssl-configuration.html

It's quite expected that certificate won't renew as the automation has been broken. What you can do is install the apache version of certbot 1yum install python-certbot-apache and re-issue the certificate 1sudo certbot --apache -d www.example.org

This lacks URL rewriting. See https://www.nginx.com/resources/wiki/start/topics/recipes/drupal/