This incident has been resolved.
An internal TLS certificate was renewed automatically, but did not get properly reloaded into our load balancer after renewal.
It took us a long time to identify this, as no errors were visible to point us to the source of the issue.
We identified the root cause and will take steps to prevent this from happening in the future.
