There is an important catch!
You will have to renew all certs hosted in the IIS from X1 to X3 before applying this solution.
If you don’t do that, your old X1 certs will stop working correctly and their SSL Labs grade will be capped to B.
That’s exactly what happened in ours webservers, which hosts hundreds of LE domain certs.
Am I right?