incorrect file fetched for CA_CERT_LOCATION about getssl

[githubRover]

Sharing the chain file among many leaf certs was never recommended.

And, starting 8 days ago any one leaf may be signed by different intermediate certs. You should start using the chain.pem returned for the issued leaf. Or, use the "fullchain.pem" file which includes the leaf and its intermediate(s).

See this Let's Encrypt announcement
https://letsencrypt.org/2024/03/19/new-intermediate-certificates

And this
https://community.letsencrypt.org/t/deploying-lets-encrypts-new-issuance-chains/216486

Questions or concerns should be posted at the community support. It is not unique to getssl
https://community.letsencrypt.org/

[nikdow]

Sharing the chain file among many leaf certs was never recommended.

And, starting 8 days ago any one leaf may be signed by different intermediate certs. You should start using the chain.pem returned for the issued leaf. Or, use the "fullchain.pem" file which includes the leaf and its intermediate(s).

See this Let's Encrypt announcement https://letsencrypt.org/2024/03/19/new-intermediate-certificates

And this https://community.letsencrypt.org/t/deploying-lets-encrypts-new-issuance-chains/216486

Questions or concerns should be posted at the community support. It is not unique to getssl https://community.letsencrypt.org/

Thanks very much for this information. We will re-design our apache configuration.

[nikdow]

Closing this as solved.