ISRG Root lazy loading problem + missing from (random) updated Windows 10 versions

[JuergenAuer]

@aarongable

Are these Windows hosts prevented from updating?

Both servers are up to date.

@sahsanu

Just visit https://valid-isrgrootx1.letsencrypt.org/ from that machine using IE

That doesn't help. The certificate is signed via DST Root. The DbServer IE shows the ISRG root.