https://community.letsencrypt.org/t/upcoming-let-s-encrypt-profile-changes-on-may-13-20th-and-27th/247049/5 Be sure to upload and link "Generation Y" root and intermediate certificates to your NetScalers if you are using LE.