supports preferred chain

Upgrade to the latest master branch, you can use --preferred-chain to select the cert chain.  --issue -d .....     --preferred-chain  "ISRG Root X1"

See more usage:


I’m guessing if this prevents a sudden root CA expiration, it should make front page news for anyone doing IOT/embedded work who doesn’t want nasty surprises in a year or so. Many probably have to define their own trusted cert chains anyways.

Thanks to all who put in the time!

This topic was automatically closed 30 days after the last reply. New replies are no longer allowed.