Unfortunately, it looks like that won’t be possible for us. When I revert back to 2.9.3, I start running into this problem: https://discourse.igniterealtime.org/t/certificate-have-no-basic-constraints-error-using-spark-2-9-3/89025
Our cert is issued from LetsEncrypt, the intermediate is there, date and name are good. This is what prompted the upgrade in the first place. Whole separate issue though.
This is frustrating.