SSLLabs saying "This server's certificate chain is incomplete."

[Jukelyn]

@MikeMcQ

I still see a wrong intermediate chain when connecting to jukelyn.com
There is still an extra R3 intermediate at the end

Try this SSL Checker. It is quicker than SSL Labs which shows this same problem.

Note it will only work about half the time for your domain. Because you still have the private IP '192.168.1.87` in the public DNS which only works on your local network. This SSL Checker chooses randomly from the two IP you have defined so connects properly if it gets the public IP

https://decoder.link/sslchecker/jukelyn.com/443

jukelyn.com. 0 IN A 98.26.44.229
jukelyn.com. 0 IN A 192.168.1.87

I haven't updated the SSL on jukelyn.com yet, I'm sorting out some of the automation part of it and applying it to test.jukelyn.com at the moment.