Why does certbot suddenly fall back to http-01 challenge instead of tls-sni-01 (https)?
It could be due to the recent vulnerability announced with the tls-sni-01 verification method, Let’s Encrypt disabled this until it’s been fixed patched.
Until then, they have advised using http for verification.
Lets Encrypt tls-sni-01 bug details