I have a web app on AWS at https://demo.titusgt.com with an AWS Certificate Manager (ACM) certificate.
It was running fine, shown as Secure site in browsers, up until my certificate expired. From the AWS docs I understood that ACM certificates should be automatically renewed, but this didn't happen.
So I went ahead and requested a new ACM certificate following this procedure, the domain owner approved, I associated the new certificate with my Elastic Load Balancer following this procedure, but AWS is still serving the old, expired certificate to my browser, so it shows up as an Insecure site.
Then I provisioned a new certificate with Let's Encrypt, imported it into the AWS Certificate Manager and associated it with my Elastic Load Balancer, but AWS is still serving the old, expired certificate.
I also checked SSLLabs, it says that the certificate is expired.
How can I get AWS to serve the new certificate? Am I missing a step in my setup?