Stuck plex.direct certificate — unknown ca (macOS) — please reset

Could someone from Plex staff please reset the stuck plex.direct certificate on my server?
@OttoKerner @ChuckPa

Plex account:
Server name: Leo M2
Machine identifier: 3ddf5802496fff387b256c18e013c1cdda37d24a
Platform: Plex Media Server 1.43.3.10768 on macOS (Apple Silicon)

Symptom: Remote Access is stuck on “Not Reachable”. The reachability prober’s TLS
handshake is rejected — PMS logs show:
CERT: incomplete TLS handshake from 34.202.97.122: tlsv1 alert unknown ca
The served certificate chains to Let’s Encrypt CN=YR1 → ISRG Root YR (not
cross-signed to X1).

Already verified on my side: real public IPv4 (no CGNAT), port 32400 forwarded and
confirmed reachable from an external VPS (returns the MediaContainer XML over HTTP),
firewall logs show the prober’s connections arriving and being forwarded to the
server, system clock is correct, Secure Connections = Preferred, multiple server
restarts, certificate re-provisioned (comes back on the same chain).

Happy to post CERT-filtered logs if needed. Thanks!

Please stop and restart your server now.

Worked, Thank you!