You should review the below blog post. It explains the recent change in the Let's Encrypt chains and your options for handling old Android devices
Below is the official thread for asking questions about it