(when I re-issued my certs I removed all the ssl lines, re-opened port 80 and ran

certbot --nginx

)