Is there any way to resume R11 in Let's Encrypt

[Osiris]

@petercooperjr

But the cert that you acquired on June 17 that used the R11 intermediate doesn't expire for another couple weeks; can you roll your server back to using that certificate, and then use that to update your devices to use a more reasonable trust store?

This is the most likely way to get this going again.

If for some strange reason this isn't viable (e.g. private key of this older end leaf cert is not available any longer, not in backups, nowhere), then you should use your backup CA.

If, for some very strange reason, you don't have a backup CA configured on the devices, you probably need to physically update the devices.

And, in the future, do this correctly.

@Sherry

Is there a way for Let's Encrypt to provide a special version of R11 specifically for our use?

Please appreciate that Let's Encrypt issues more than 6 million (!!!) certs every day with just a limited team and limited funding. While technically almost everything might be possible (and I'm not even sure they can reinstate retired intermediates), you can't expect the LE team to somehow reinstate these retired intermediates just for a single user that made a mistake, how costly that might be.