After generating a new pfx certificate in 2024.02.08, I noticed that there was no chain in it. The file contains only the end certificate.
What create a problems in local Linux servers (like Ubuntu 22.04) that do not have access to the Internet.
The one generated back on 2023.11.22 was with a full chain.
How to generate a certificate pfx with a full chain?
ISRG Root X1 → R3 → *.mysyte.com
PS: CertifyTheWebSetup V6.0.15
Hi Karen,
I suspect your machine does not trust ISRG Root X1 and was using the previous DST Root CA X3 chain which Let’s Encrypt no longer serve. Does the windows machine you are using have ISRG Root X1 (issued by ISRG Root X1) in it’s local machine certificate store under Trusted Root Certification Authorities? If not you need to install that. Chain of Trust - Let's Encrypt
Also check that R3 issued by ISRG Root X1 is present in Intermediate Certification Authorities.
Windows updates normally install trusted roots automatically but some machines are configured to not allow that.