Resolved Let's Encrypt use IdentTrust Intermediate

[swd_danielk]

When Let's Encrypt configures a SSL Certificate on a domain the ISRG intermediate is used. For some applications it's required that the certificate chain contains the IdentTrust cross-sign certificates which should be contained in the fullchain.

I tried to find out how Plesk manages the certificates but couldn't figure out how to change the chain order.

Any ideas on how to change this behaviour?
Thanks in advance!

 

[UFHH01]

Hi swd_danielk,

pls. have a look at => #2 for further informations. If you desire more help on your topic, pls. consider to ask more specific, because it is unclear at the moment, what you would like to know, or what your goal is.

 

[Bitpalast]

I think @swd_danielk wants to use a different intermediate certificate in the chain when the certificate comes from Let's Encrypt. But that cannot be possible, because the Let's Encrypt authority would need to be verified by the other trust center in that case. The chain is not determined by the client, but by the certificate issuer.

 

[swd_danielk]

Thanks for your responses: I'll try to clarify the issue.

I'm running a website that is protected via Let's Encrypt. The chain contains a certificate for the domain itself issued by Let's Encrypt Authority X3 and the certificate for Let's Encrypt Authority X3 by the DST Root CA X3. This Certificate is signed by ISRG Root X1. According to the Let'sEncrypt website the intermediates are cross-signed by IdenTrust and the application I want to use does not know / accept the Let's Encrypt ISRG Root. The support mentioned that the certificate chain should contain the IdenTrust instead of / in addition to the ISRG intermediate in order to get everything working.

I was unable to figure out how to changes this when Plesk manages my certificates

 

[UFHH01]

Hi swd_danielk,

actually, you are asking for support at the wrong forum then, because you are asking for support to a Let's Encrypt - related issue/problem, which has got nothing to do with Plesk itself. Even if the provided link ( => Chain of Trust - Let's Encrypt - Free SSL/TLS Certificates ) should already explain to you, how to deal with the root certificates, pls. consider to ask for support at the Let's Encrypt Community :

=> Let's Encrypt Community Support​