Let's Encrypt: "unable to get issuer certificate" (error 2), forced reissuance and rate limits

[supermathie (Michael Brown)]

Merged

Thanks @jmx for clearly identifying the problem and proposing the fix - it was good; I just wanted to do a bit more.