On Thu, Feb 03, 2022 at 01:39:44PM -0500, Martin Hicks wrote: > The only configuration change I made in response to this discussion was > to disable smtpd_tls_ask_ccert - I'm not sure why this was ever enabled. > > I'll update in a week or two when I see another e-mail from aircanada.
You can also (after checking the documentation) use the:
--preferred-chain "ISRG Root X1"
flag with certbot, or otherwise avoid the DST cross cert in your server
chain.
--
Viktor.
