Certbot issues ECDSA key signed with RSA

If you're trying to get an RSA cert, add --key-type rsa to your certbot command. This will give you an RSA cert signed by an RSA intermediate.

If you're trying to get an ECDSA certificate signed by an ECDSA intermediate, that's trickier since you need to get on the allowlist since it's still a relatively new configuration (and will break some old Android clients).

4 Likes