I'm using certbot with dns-standalone authenticator using the command: certbot certonly --config-dir . --preferred-challenges dns --authenticator certbot-dns-standalone:dns-standalone -d sitename This works fine but I just checked the fullchain.pem and it seems the root certificate in the chain is…

Fullchain.pem still including root "ISRG Root X1" signed by "DST Root CA X3"

JamesLE July 5, 2021, 4:07am 2

Yes, here’s an explanation: Production Chain Changes

Topic		Replies	Views
Invalid certificate chain Help	1	2031	February 14, 2022
Cannot get "ISRG Root X1" chain certificates Help	3	1098	November 23, 2021
ISRG Root X1 in chain.pem? Server	5	1627	November 10, 2018
With '--preferred-chain "ISRG Root X1"' fullchain.pem doesn't contain the ISRG Root X1 certificate Help	6	3647	October 15, 2021
DST Root CA X3 Expiration Help	15	2972	November 12, 2021