fullchain.pem holds both ISRG roots, confusing Certbot users
fullchain.pem contains both ISRG root certificates, so users cannot tell which chain to deploy or trim.
Tier II · Emerging Problems that are still building up.
4 public reports · first reported 25 September 2026 · last reported 25 September 2026
What's going wrong
Certbot users who request certificates from Let's Encrypt find that the fullchain.pem file contains both ISRG Root X1 and X2 alongside the leaf and intermediate certificates.
AI-assisted: written with the help of AI from the reports. The idea report has the full summary.
In the idea report
- The full summary.
- The products the 4 reports are about, and how many came each month.
- Related problems.
No business has been found with this problem yet, so the report has no contacts. All sales are final — no refunds. Pricing.