This change went live today. The cross-sign from IdenTrust’s DST Root CA X3 is no longer provided in our API.