I have now installed a better #SSL certificate issued by #LetsEncrypt and with the help of this #python script: https://github.com/diafygi/acme-tiny

Plus I have used a largely expanded #shell script:
https://social.mxchange.org/renew-certs.sh

But now my SSL sites got rated with B by #SSLLabs because of an incomplete chain. I think I need to download the CA certificate and attach it at mine?

I also have (not yet reloaded) added DH parameters (DH = Diffie-Hellmann?) to my certificate parameters, I have read it will improve some security.