On Tue, May 02, 2023 at 11:09:59AM -0400, PGNet Dev wrote: > what root CA expiry are you referring to?
The DST root, that issued the ISRG X1 cross cert. > > The "ISRG Root X1" CA no longer needs a cross cert. > > it seems that LE still provides them, > > https://letsencrypt.org/certificates/ > > need to see if the certbot/acme client has a knob to disable/remove the DST > cross. >From my renewal.conf file: [renewalparams] reuse_key = True preferred_chain = ISRG Root X1 ... -- Viktor. _______________________________________________ Postfix-users mailing list -- postfix-users@postfix.org To unsubscribe send an email to postfix-users-le...@postfix.org