@norbinus @denos
Be aware that chain.pem (and fullchain.pem) will be replaced on their next renewal.
If you want to continue using that shorter/alternate trust path chain, you must instruct the ACME client to do so. Which can be done with the added parameter:
--preferred-chain "ISRG Root X1"
3 Likes