I don’t think ACME alone fixes it. I had this exact problem with letsencrypt when they did their recent cert switcharoo. Intermediate cert was referred to by n

I don’t think ACME alone fixes it. I had this exact problem with letsencrypt when they did their recent cert switcharoo. Intermediate cert was referred to by name in the cert chain but not served by the server in full. Server was of course referencing the newly signed intermediate cert (called L3 I believe) but the client only had a stale copy/ version of L3 signed by an expired trusted cert. Issue was on an embedded device that couldn’t be fixed so the newly signed intermediate cert needed installation everywhere manually