Certificate chain validation fails on OLDer android devices

You can request the old longer chain with that version of Certbot adding this option to your cert request command: --preferred-chain "DST Root CA X3"

But, this is only temporary as that longer chain will no longer be available starting Jun6 2024 as noted in the blog linked earlier.

Longer term you have several options. One recommended in that blog is to use Firefox instead of Chrome. Firefox works with the shorter chain.

You could also look to use a different Certificate Authority but you need to check the needed compatibility.

See this thread for similar discussion

4 Likes