Discovered that the client's ISP IP address had changed despite them paying for a static public IP address. Changed the DNS record in Cloudflare, allowing the certificate manager to work properly again.