Issuance on R3 vs. X3: is this configurable?

[Osiris]

@griffin

I didn't realize X3 was signed by ISRG Root X1.

Yes, everything currently in use is ISRG Root X1 signed and IdenTrust DST Root X3 cross-signed. Although R3 currently isn't in use, it is signed by both roots too.