Certbot always issues bad certificate with: Fake LE Intermediate X1

Help
8

Hi @schoen - Sure!

certbot certificates

Saving debug log to /var/log/letsencrypt/letsencrypt.log
-------------------------------------------------------------------------------
Found the following certs:
  Certificate Name: account.domain.edu.zm
    Domains: account.domain.edu.zm
    Expiry Date: 2017-09-21 19:32:00+00:00 (VALID: 89 days)
    Certificate Path: /etc/letsencrypt/live/account.domain.edu.zm/fullchain.pem
    Private Key Path: /etc/letsencrypt/live/account.domain.edu.zm/privkey.pem
-------------------------------------------------------------------------------

cat /etc/letsencrypt/renewal/

root@ip-172-31-34-128:~# cat /etc/letsencrypt/renewal/*
# renew_before_expiry = 30 days
version = 0.14.2
archive_dir = /etc/letsencrypt/archive/account.domain.edu.zm
cert = /etc/letsencrypt/live/account.domain.edu.zm/cert.pem
privkey = /etc/letsencrypt/live/account.domain.edu.zm/privkey.pem
chain = /etc/letsencrypt/live/account.domain.edu.zm/chain.pem
fullchain = /etc/letsencrypt/live/account.domain.edu.zm/fullchain.pem

# Options used in the renewal process
[renewalparams]
authenticator = webroot
installer = None
account = 57fc6e2f18f77e1bc94f3909d697c19a
webroot_path = /var/www/ehc_simplesamlphp/www,
server = https://acme-v01.api.letsencrypt.org/directory
[[webroot_map]]
account.domain.edu.zm = /var/www/ehc_simplesamlphp/www
root@ip-172-31-34-128:~#

I should also note that prior to my last attempt, I executed cp -r /etc/letsencrypt /opt && rm -rf /etc/letsencrypt/* to ensure no existing configuration scripts were used.