RHEL/CentOS 6 OpenSSL client compatibility after DST Root CA X3 expiration

[orangepizza]

if it doen'st care about self-sign then would it need to keep same issuer? not sure intermediate from unknown issuer in trust store would work though