What profile name to choose if I want X2 only certificate

What is the name of the profile if I do not want the X1 chain and want the shortest X2 ECDSA only chain. The blog post does not say anything about RSA or ECDSA chains, classic or tlsserver profiles.

I don't think the chains are selected by profiles. Even before profiles were possible, you could select alternate chains in your ACME client.

There might be a difference between which default chain and, if any, alternate chains are offered between the profiles though :man_shrugging:

4 Likes

I'd guess that setting your cert key type to ECDSA and setting preferred chain to ISRG Root X2 would work as expected.

6 Likes