Certificates are not trusted on Chrome and Safari on old iMac with El Capitan

Open Keychain Access, look in System Roots for ISRG Root X1 if it's not there, grab it from https://letsencrypt.org/certs/isrgrootx1.der then drag it onto the Keychain Access app window.