Makes sense. Verifying the leaf certificate directly is cleaner than relying on OpenSSL reading only the first certificate in fullchain.cer.
I’ll close PR #1136 in favor of yours.
Happy to test the new PR if needed.
1 Like