As much as I hate to give this advice... I think, in this case, it must be tried.
Try trusting the Intermediate cert (the one between your leaf and "ISRG Root X1").
With any luck, that entry (and its' cache hit) will supersede the remaining (cached) trust/untrusted path).