In a normal situation it is supposed that if an AP goes offline it will be investigated right away or in a short period of time. However, if no action was taken during a longer offline period, it might very likely that AP was disconnected intentional...

I would not say it is massive effort, except the fact it was 01:00 AM  and that I had to come up with a solution to run the certbot on the Synology which is behind the MX appliance, which is miles away.

You can't skip the root certificate, as it is the required piece of information to validate the device certificate, but now when I looked once more at both certificates I think I have another bit of explanation.The previously posted root certificate ...

Although I don't have any explanations for the behavior of the Certbot, here's the workaround.Meraki expects two certificates: device certificate and certificate chain in device-intermediate-root order.After generating the Lets Encrypt certificate I ...