Help thread for DST Root CA X3 expiration (September 2021)

Help
#1

If you have any questions about whether you need to do anything special for the upcoming DST Root CA X3 expiration in September 2021, please post them here. A staff member may split out some conversations into their own threads.

Note: Your first step in debugging should be to update your operating system. Most problems are solved by running the latest operating system available for your machine, and staying up to date will also make you more secure.

Update 30 September 2021

Yesterday, the R3 signed by DST Root CA X3 intermediate expired as planned. If you experience problems related to certificate chaining you should first review your configuration and make sure your server/website/device is sending the correct chain with the updated R3 intermediate signed by ISRG Root X1. It is unlikely that you need to force renewal to resolve issues related to R3 signed by DST Root CA X3 expiring. This thread and many more on the community offer advice to review and resolve this problem.

Earlier today, the DST Root CA X3 expired as planned. Most problems related to DST Root CA X3 expiring will not be solved by force renewal. Please search the forum and this this thread for help to resolve the problems you are experiencing before opening a new thread.

16 Likes
Upgrade the root certificate from X3 to X1
Feedback wanted: DST Root CA X3 expiration all-subscriber email
Production Chain Changes
Default chain still pre-May version
DST Root CA X3 Countdown to maturity
Temp support for X1? Lost access to large number of devices
Seafile client DST Root CA expiry
Help thread for ACMEv1 EOL (June 2021) - Returned ACMEv1 is Deprecated Error Message
#2

3 posts were split to a new topic: Broken links on doc page for DST Root CA X3 Expiration

#3

532 posts were merged into an existing topic: Ubuntu Android problem

#6
#9

A post was split to a new topic: Android application trust error

#10

4 posts were merged into an existing topic: Domain wrongly associated with my email

#41

5 posts were split to a new topic: ECDSA intermediate issuance and DST Root CA X3 expiration

#42

A post was merged into an existing topic: ECDSA intermediate issuance and DST Root CA X3 expiration

#276

10 posts were split to a new topic: Issues with Electron and expired root

#277

4 posts were split to a new topic: MariaDB and MySQL CA Certificate Update

#296

5 posts were split to a new topic: Android devices with DoT configured; interaction with new default chain

#301

11 posts were split to a new topic: Amazon AMIs failing to connect to backends; modifying ca-bundle

#302

38 posts were split to a new topic: Can't HTTP POST - SSL error

#303

7 posts were split to a new topic: Another R3 problem

#307

A post was merged into an existing topic: Android devices with DoT configured; interaction with new default chain

#364

21 posts were split to a new topic: Directory access problem

#375

11 posts were split to a new topic: Choice of default long chain vs short chain

#406

A post was merged into an existing topic: Another R3 problem

#411

4 posts were split to a new topic: Connection Errors on Apple Devices

#455

A post was split to a new topic: How can I get important updates like the DST Expiry in the future