Yes, just restarting apache2 after changing the "snake-oil" configuration in apache2 to the letsencrypt certificate is not sufficient.
You have to reboot the nextcloud server.
I don't know where the server stores the certificate information and how to restart nextcloud and remove all "cache" entries.
Feels like Windows NT 4.0😯