Help thread for DST Root CA X3 expiration (September 2021)

A post was split to a new topic: Certbot 1.12+ which supports --preferred-chain in OS packages