Change the default CA from LE's X1 to X3.

1 files changed, 1 insertions, 1 deletions

diff --git a/letsencrypt b/letsencrypt
index 2b0249c..d11b569 100755
--- a/letsencrypt
+++ b/letsencrypt
@@ -604,7 +604,7 @@ elsif ($COMMAND eq 'new-cert') {
         };
 
         # verify certificate validity against the CA
-        $conf->{CAfile} //= '/usr/share/letsencrypt-tiny/lets-encrypt-x1-cross-signed.pem';
+        $conf->{CAfile} //= '/usr/share/letsencrypt-tiny/lets-encrypt-x3-cross-signed.pem';
         if ($conf->{CAfile} ne '' and spawn({in => $x509}, 'openssl', 'verify', '-CAfile', $conf->{CAfile},
                                                                       qw/-purpose sslserver -x509_strict/)) {
             print STDERR "[$s] Error: Received invalid X.509 certificate from ACME server!\n";