# Fixing Windows installs that don't receive updates to their trusted roots

**URL:** <https://community.letsencrypt.org/t/fixing-windows-installs-that-dont-receive-updates-to-their-trusted-roots/161162>\
**Category:** Help\
**Created:** [September 30, 2021, 9:32pm UTC](https://community.letsencrypt.org/t/fixing-windows-installs-that-dont-receive-updates-to-their-trusted-roots/161162 "2021-09-30T21:32:42Z")\
**Posts on this page:** 1\
**Showing post:** 5

<div class="post-metadata">

**Author:** ![Cryptoman](https://avatars.discourse-cdn.com/v4/letter/c/439d5e/32.png) [@Cryptoman](https://community.letsencrypt.org/u/Cryptoman)\
**Post date:** [September 30, 2021, 10:05pm UTC](https://community.letsencrypt.org/t/fixing-windows-installs-that-dont-receive-updates-to-their-trusted-roots/161162/5 "2021-09-30T22:05:18Z")

</div>

Correct.  
The reason DST Root CA X3 still exists in the default chain is only for older Android devices that don't care about the expiration date of the root certificate, however, for other operating systems, it must have the ISRG Root X1 certificate locally.  
You can try downloading the "ISRG Root X1" certificate in [Chain of Trust - Let's Encrypt](https://letsencrypt.org/certificates/) and put it in the "Third Party Root Certification Authorities" directory of Windows 7 to verify that this resolves the issue.

---

_[View the full topic](https://community.letsencrypt.org/t/fixing-windows-installs-that-dont-receive-updates-to-their-trusted-roots/161162)._