The problem is the CSR.
You probably have a SHA1 signature on it. Let's Encrypt no longer supports that, per https://community.letsencrypt.org/t/rejecting-sha-1-csrs-and-validation-using-tls-1-0-1-1-urls.
You need to update it to SHA256.
5 Likes