Sectigo changed their Intermediate CA and Root CA earlier this year. We just went through the renewal process this weekend and holy craptastic weekend batman. 0/10 do not recommend.
Any Linux box, Android or IOs device that is older than a couple of years will stick out its middle finger to you, and your uber driver about this certificate for hours on end.
We are still trying get one service up. Node still won’t recognize this cert no matter what I do. I even gave up and got a new certificate for one of our sub domains for LetsEncrypt cause our older Android devices just said… #Nope