Resolved
Oct 01 at 08:01am IST
Even though our certificate was scheduled to renew automatically, it was not done because of a missing DNS record. Cloudfront was affected because it actively checks for SSL certificate validity. Fastly was not affected as it was not checking SSL certificate validity.
We have put checks which will now proactively notify us of any such expiring SSL certificate.