Hello All, It looks like renewing a certificate provides the shorter chain since Feb 8, 2024. On Thursday, Feb 8th, 2024, we stopped providing the cross-sign by default in requests made to our /acme/certificate API endpoint. For most Subscribers, this means that your ACME client will configure a …

Thank you very much. I was able to upgrade certbot and renew the certificate using parameter --preferred-chain DST Root CA X3.

Shortening the Let's Encrypt Chain of Trust

jcjones Split this topic February 15, 2024, 3:20pm 12

Topic		Replies	Views
Questions regarding "Shortening the Let's Encrypt Chain of Trust" Help	92	6858	June 10, 2024
Shortening the Let's Encrypt Chain of Trust API Announcements	9	8405	September 30, 2024
How to opt into short chain? Issuance Tech	24	1310	February 4, 2024
Use shorter alternative chain better for letsencrypt API itself Feature Requests	4	1471	October 31, 2021
Extend cross-signed by IdenTrust’s DST Root CA X3 signed certs Help	14	662	May 18, 2024