PF 14.0: Let's encrypt unable to pull Root CA

[lzammit]

Nov 07 16:26:42 debian12-pf1 pfperl-api-docker-wrapper[242398]: {'strict-transport-security' => 'max-age=604800','server' => 'nginx','content-length' => '3571','link' => '<https://acme-v02.api.letsencrypt.org/directory>;rel="index"','date' => 'Thu, 07 Nov 2024 21:26:42 GMT','content-type' => 'application/pem-certificate-chain','connection' => 'keep-alive','cache-control' => 'public, max-age=0, no-cache','replay-nonce' => 'SHEOpopMA6ySDZem5POvhWezFl-qqgdjZBBrSV_gNUHZFpxQv1Y','x-frame-options' => 'DENY'}Certificate is separated from the chain.

Nov 07 16:26:42 debian12-pf1 pfperl-api-docker-wrapper[242398]: Domain certificate has been received.
Nov 07 16:26:42 debian12-pf1 pfperl-api-docker-wrapper[242398]: pfperl-api(11) INFO: [mac:[undef]] Certificate is not ASN1 encoded. Trying next encoding. (pf::ssl::x509_from_string)
Nov 07 16:26:42 debian12-pf1 pfperl-api-docker-wrapper[242398]: pfperl-api(11) INFO: [mac:[undef]] Getting intermediate for CN=zam.duckdns.org (pf::ssl::fetch_all_intermediates)
Nov 07 16:26:42 debian12-pf1 pfperl-api-docker-wrapper[242398]: pfperl-api(11) WARN: [mac:[undef]] Unable to find CA issuer certificate download link in certificate data. Assuming top of the chain was reached. (pf::ssl::fetch_all_intermediates)
Nov 07 16:26:42 debian12-pf1 pfperl-api-docker-wrapper[242398]: pfperl-api(11) INFO: [mac:[undef]] Synching /usr/local/pf/raddb/certs/ca.pem in cluster (pf::ssl::install_file)
Nov 07 16:26:42 debian12-pf1 pfperl-api-docker-wrapper[242398]: pfperl-api(11) INFO: [mac:[undef]] Synching file /usr/local/pf/raddb/certs/ca.pem to cluster members (pf::cluster::sync_files)
Nov 07