Unable to verify certificate

Help
21

Sorry for the delay, but I was able to spin up a new instance and use this flag. Also had two more cert requests today, all 3 checkout fine with that flag attached. Good News! Only follow up question is does certbot accept --preferred-chain "ISRG Root X1" in the renew action, or do i need to reissue the other 198? I only ask b/c this flag is not in the --help output.

Also if simple. Since i was getting the ISRG Root X1 on all of my certs b/c i upgraded a while ago when asked, why would they fail to validate?

Thanks @rg305

2 Likes
22

Yes, there is a line that can be added to the renewal.conf files.
I think it's:
preferred_chain = "ISRG Root X1"

You can check within the renewal config for any of the sites where you have already used that.

1 Like
23

Thank you, i will do that. I do see that there is only 1 cert in chain.pem now, so that makes sense.

2 Likes
24

4 posts were split to a new topic: Zimbra + "ISRG Root X1"

25

This topic was automatically closed 30 days after the last reply. New replies are no longer allowed.