Nginx with preferred-chain "ISRG Root X1" - still showing "DST Root CA X3"

[prprt]

@Osiris

That certbot is too old to have the preferred-chain option.

Please update it to 1.12.0 or newer.

They seem to be using CentOS, this may be relevant regarding the outdated certbot version: RHEL/CentOS 7 OpenSSL client compatibility after new chain - #37 by FelixSchwarz