If the certificate recently stopped working it is likely due to us recent switch to modern ECDSA type certificates. As noted our certificates are standard Let’s Encrypt certificates as issued by the official certbot tool.
It appears it may be possible to manually update the root certificate bundle in esp-idf.