Why would the SSL certificate of a sandbox domain expired when it's setup for NS's automatic certificates?

FYI We’ve experienced this on our SB account, and lodged Case 4326779 with support if that helps your enquiries. We’re waiting to hear back.