Regarding https://letsencrypt.org/2020/12/21/extending-android-compatibility.html From what I understand, the cross sign from DST Root CA X3 (expiring soon) being introduced into the new chain for Android compatibility will break clients using openssl 1.0. Can anyone confirm this?

Expiring trust anchor, openssl 1.0

aarongable January 21, 2021, 9:45pm 4

Hi, and welcome! See my earlier response on this same topic here:

4 Likes

Topic		Replies	Views
Questions re: OpenSSL Client Compatibility Changes for Let’s Encrypt Certificates Issuance Tech	55	10061	September 7, 2021
Help thread for DST Root CA X3 expiration (September 2021) Help	720	164237	November 3, 2022
Understanding DST Root expiry and the older default cert chain Help	36	3559	December 8, 2021
WolfSSL cert issue Help	23	2437	November 6, 2021
PLEASE cross-sign with another older CA before the 9/2021 deadline Feature Requests	22	4176	May 25, 2021