Certificate renewal close to private key expiration can result in hitting a rate limit

[plinss]

Possibly skip renewal if within 5 days of private key expiration (and provided there are sill at least ~21 days left on the cert).

Possibly only when auto_renew is turned on?

Double check LE rate limits.