Hello
i want get R13 (ISRG Root X1) ssl for support legacy browsers using acme.sh
my domain:
3dprintersbase.com
i run this command:
./acme.sh --issue -d 3dprintersbase.com -w /usr/local/lsws/DEFAULT/html/ --keylength 2048 --preferred-chain "ISRG Root X1" --force
and i see still its E7:
Certificate Authority E7
what is the problem? how i able get R13 for my domain?
Thanks.
Osiris
December 28, 2025, 10:21am
2
Looks like your acme.sh is still using ECDSA keypairs for the certificate. I'm guessing --keylength 2048 isn't enough to let it use RSA. Look in the documentation on how to use an RSA key. (I don't have experience with acme.sh.)
btw IIRC that command will create new dir named for RSA and ECC certificates, so you'll need to reconfig your webserver to use RSA certificate.
Osiris
December 28, 2025, 10:45am
4
An RSA certificate for that domain has been issued this morning anyway: crt.sh | 23414986428
hebbet
December 28, 2025, 10:52am
5
Which old Browser do you want to support?
Ecdsa is supported for many years by all current Browsers