November 02, 2022

acme.sh letsencrypt DST Root CA X3

Well that was fun.

Updated acme.sh to fix an issue with some browsers seeing the expired cert isse and got errors from zerossl.com

[Wed Nov  2 15:18:43 NZDT 2022] Polling order status: https://acme.zerossl.com/v2/DV90/order/9Lxxxxxxxx

[Wed Nov  2 15:18:45 NZDT 2022] Order status is processing, lets sleep and retry.

I added 

    --perferred-chain

to get over the expired cert issue and

    --set-default-ca --server letsencrypt

to ensure the cert was with letsencrypt.

Full command line is now.... 

acme.sh --issue -d walkerfamily.kiwi --dns dns_gd -d *.walkerfamily.kiwi --dns dns_gd -d wjw.nz -d *.wjw.nz -d wjw.co.nz -d *.wjw.co.nz -d wjw.co.uk -d *.wjw.co.uk -d wjw.uk -d *.wjw.uk -d *.nzags.com --dns dns_zonomi --preferred-chain