Want get R13 (ISRG Root X1) with acme.sh script

Hello
i want get R13 (ISRG Root X1) ssl for support legacy browsers using acme.sh

my domain:
3dprintersbase.com

i run this command:
./acme.sh --issue -d 3dprintersbase.com -w /usr/local/lsws/DEFAULT/html/ --keylength 2048 --preferred-chain "ISRG Root X1" --force

and i see still its E7:
Certificate Authority E7

what is the problem? how i able get R13 for my domain?

Thanks.

1 Like

Looks like your acme.sh is still using ECDSA keypairs for the certificate. I'm guessing --keylength 2048 isn't enough to let it use RSA. Look in the documentation on how to use an RSA key. (I don't have experience with acme.sh.)

4 Likes

btw IIRC that command will create new dir named for RSA and ECC certificates, so you'll need to reconfig your webserver to use RSA certificate.

4 Likes

An RSA certificate for that domain has been issued this morning anyway: crt.sh | 23414986428

4 Likes

Which old Browser do you want to support?

Ecdsa is supported for many years by all current Browsers

4 Likes