It must have been a ghost.
No error messages, other than Let's Encrypt saying the domain wasn't pointed to the IP or was .htaccess restricted, would just load to the first site in the user list using the shared IP.
Did an images restore, and updated Apache again, and all is working.
Very weird.
Never seen a problem like that in 5 years of running CWP.