It seems lets-encrypt-x3-cross-signed.pem is not needed now.

[tudou-wp]

lets-encrypt-x3-cross-signed.pem is already included in $DOMAIN_CRT.
So no need to combine it to $DOMAIN_CHAINED_CRT.
It would cause "Incorrect order, Extra certs" in ssllabs test.