DST is a root but the intermediate is cross signed by both the DST and the ISRG look at the certificates site of LE to see the structure, but because the same cert cannot have 2 signatures at the same time you need 2 copies of the intermediate… one signed by DST and another signed by ISRG
1 Like