The documentation says to download and install the "R3 Intermediate Certificate" from Let's Encrypt, but this intermediate CA is on the "Retired" category from Let's Encrypt, which means "These intermediate CAs are no longer being used to issue Subscriber certificates"