For anyone else who gets to this issue, one workaround:
snap stop rocketchat-server.rocketchat-caddy
# in /root/snap/rocketchat-server/current
mv .caddy .caddy.bak
snap start rocketchat-server.rocketchat-caddy
this appears to force caddy to renew the cert