It's also possible one of the TLS endpoints in the rotation didn't get the cert update when everyone else did and was serving an expired cert. Then the Reddit SREs noticed it and fixed it before too many people complained.