Certbot has been configured to prefer certificate chains with issuer 'ISRG Root X1', but no chain from the CA matched this issuer. Using the default certificate chain instead

That is the correct preferred-chain value for the production server. You have chosen the staging server to test (thanks) but the chain name is different.

I believe you could use --preferred-chain "Fake LE Root X2" for test server as noted here

Also, what version of certbot do you have? Some versions had a bug (not causing problem with staging but for after).

Do,

certbot --version

UPDATE: @salman I just realized the link which described the Fake LE Root was from 2020. I do not know if that will still work for staging server. Please let us know either way and about your certbot version.

6 Likes