Even though our certificate was scheduled to renew automatically, it was not done because of a missing DNS record. Cloudfront was affected because it actively checks for SSL certificate validity. Fastly was not affected as it was not checking SSL certificate validity.
We have put checks which will now proactively notify us of any such expiring SSL certificate.