Hi, I am looking for a way to obtain a certificate chain through Let's Encrypt that does not append a cross-signed ISRG Root X1 certificate at the end. Right now, when requesting a certificate for a domain using the latest acme.sh client, I receive a certificate chain which includes a ISRG Root X1 …

Thank you, it works for me too, now. My mistake was trying to switch the preferred chain during a certificate update, I had to re-issue the certificate completely instead of updating it (in acme.sh terms) for the setting to become effective.

Howto obtain a full certificate chain without a cross-signed ISRG Root X1

Help

system Closed October 31, 2021, 2:53pm 4

This topic was automatically closed 30 days after the last reply. New replies are no longer allowed.

Topic		Replies	Views
ACME self signed ISRG Root X1 certificate Help	6	1135	October 31, 2021
Certificate chain no longer includes ISRG Root X1? Help	10	2882	December 24, 2023
How do we stick to IdenTrust cross-signed after September Help	5	1216	September 17, 2020
Certificates requested through acme.sh are not issued as ISRG Root X1 Help	15	415	November 11, 2024
DST Root CA X3 Expiration Help	16	2769	December 12, 2021

Howto obtain a full certificate chain without a cross-signed ISRG Root X1

Related topics