Extend cross-signed by IdenTrust’s DST Root CA X3

Help
1

Hello everyone,

To ensure I understand correctly about the Extend cross-signed certificate by IdenTrust’s DST Root CA X3 (2024-6-6 and 2024-9-30), I hope someone can confirm the following a question for me.
Currently, I have domain e.g: A.com obtaining a long-chain certificate from DST Root CA X3 using "certbot certonly --preferred-chain "DST Root CA X3"" to extend the validity period for older Android devices.
Therefore, if I execute this command again before June 6th (e.g June 2th) , what will happen to my domain after June 6th? Will my certificate obtained before June 6th remain valid, and will older devices continue to use it until it expires (in 2-3 months)?

Thank all.

2

Nothing until that certificate expires.

Yes.

4 Likes
3

Renewals after that date will use the ISRG Root X1 chain, because the "DST Root CA X3" chain won't be presented any more. Older devices that do not trust ISRG Root X1 will then have problems communicating with your service.

5 Likes
4

Thank you, I really understand

2 Likes
5

Yes, we are still planning to make changes in time, thank you for your response

2 Likes
6

This topic was automatically closed 30 days after the last reply. New replies are no longer allowed.