Just noticed in nginx error.log:
2020/07/25 21:47:56 [error] 865#865: ocsp.int-x3.letsencrypt.org could not be resolved (110: Operation timed out) while requesting certificate status, responder: ocsp.int-x3.letsencrypt.org, certificate:
However, I can resolve the host ocsp.int-x3.letsencrypt.org manually (dig) just fine on that system.
What can I do to solve this? Different DNS for the web (Trellis) server?