It looks like renewing a certificate provides the shorter chain since Feb 8, 2024.
On Thursday, Feb 8th, 2024, we stopped providing the cross-sign by default in requests made to our /acme/certificate API endpoint. For most Subscribers, this means that your ACME client will configure a chain which terminates at ISRG Root X1, and your webserver will begin providing this shorter chain in all TLS handshakes. The longer chain, terminating at the soon-to-expire cross-sign, will still be available as an alternate chain which you can configure your client to request.
In line with this, is it still possible to request the longer chain and how to do it? I may have misundertood this statement -> "The longer chain, terminating at the soon-to-expire cross-sign, will still be available as an alternate chain which you can configure your client to request."
well I shoudl ask what client you are using, but after few months that option goes away too, so you'd better prepared to adapt to short chain or move to other certificate authority
Certbot can obtain and install HTTPS/TLS/SSL certificates. By default,
it will attempt to use a webserver both for obtaining and installing the
certificate.
certbot: error: unrecognized arguments: --preferred-chain DST Root CA X3
Just remember, the DST Root CA X3 chain will go away entirely -- i.e. it won't be selectable using the --preferred-chain flag -- on June 6th. So you'll want to ensure that you don't need that root anymore by that time.