Should I add both DST Root CA X3 and ISRG Root X1 intermediates?

Server
21

isrgroot
isrgroot.png663×682 56.3 KB

Works on multiple Win 10 1709 here.

22

So I finally mange to fix the error. As @tdelmas suggested it was related to OCSP. I added this to the Apache vhost:

SSLUseStapling on
SSLStaplingReturnResponderErrors off
SSLStaplingResponderTimeout 5

As well as this to the ssl.conf file:
SSLStaplingCache “shmcb:/opt/bitnami/apache2/logs/ssl_stapling(128000)”

And that got rid of the error. Did not see this error before ISRG was in the Windows root store, but at least this solves it if anybody else runs into similar issues.

Thanks for all the help!!!

23

Thanks. Good to know!

isrg-root
isrg-root411×516 14.8 KB

With IE11, DST Root is used.