>Anyway, what changes in January is not anything about the certificates you actually get from Let's Encrypt. Not one byte. >[...] >But there is no change to t

>Anyway, what changes in January is not anything about the certificates you actually get from Let's Encrypt. Not one byte. >[...] >But there is no change to the actual end subscriber "leaf" certificate and that's a mistake in the linked article. It's not really a mistake. You're correct in the sense that no change in behavior is required from the ACME protocol client, but the cert PEM it downloads at the end is different. The PEM contains the whole chain, and depending on which link the client downloads (the usual one or the alternate one in the link header) it'll get one chain or the other.