Hello
i want get R13 (ISRG Root X1) ssl for support legacy browsers using acme.sh
my domain:
3dprintersbase.com
i run this command:
./acme.sh --issue -d 3dprintersbase.com -w /usr/local/lsws/DEFAULT/html/ --keylength 2048 --preferred-chain "ISRG Root X1" --force
and i see still its E7:
Certificate Authority E7
what is the problem? how i able get R13 for my domain?
Thanks.
1 Like
Osiris
December 28, 2025, 10:21am
2
Looks like your acme.sh is still using ECDSA keypairs for the certificate. I'm guessing --keylength 2048 isn't enough to let it use RSA. Look in the documentation on how to use an RSA key. (I don't have experience with acme.sh.)
4 Likes
btw IIRC that command will create new dir named for RSA and ECC certificates, so you'll need to reconfig your webserver to use RSA certificate.
4 Likes
Osiris
December 28, 2025, 10:45am
4
An RSA certificate for that domain has been issued this morning anyway: crt.sh | 23414986428
4 Likes
hebbet
December 28, 2025, 10:52am
5
Which old Browser do you want to support?
Ecdsa is supported for many years by all current Browsers
4 Likes