I need to keep using the current cross signed certificate chain as long as possible. certbot's help says: "[...] prefer the chain with an issuer matching this Subject Common Name". Will this do the trick ?: certbot renew --preferred-chain "DST Root CA X3" How can I check that this is working bef…

[image] fzo: I was looking for a way (a specific log entry or something on stdout) to check that the chain argument is correct and that "DST Root CA X3" is not used as fallback If you want to check that the Certbot flag works as expected, one option is to spin up a small testing environment a…

What is the chain to pass to --preferred-chain argument to keep using DST Root X3 root certificate?

Help

rg305 November 9, 2020, 11:09am 2

See: Certbot 1.6.0 Release

2 Likes

Topic		Replies	Views
Is the preferred-chain 'DST X3 Chain' option live? Help	5	2099	January 20, 2021
Issue certificate using the IdentTrust « old chain » Help	19	2466	June 17, 2021
Preferred-chain option doesn't work on certbot 1.9.0 Help	4	1087	October 30, 2021
Confused about the different certificate chains in staging Help	8	1414	September 27, 2023
--preferred-chain not taking effect Help	36	10316	December 17, 2021

What is the chain to pass to --preferred-chain argument to keep using DST Root X3 root certificate?

Related topics