Should I add both DST Root CA X3 and ISRG Root X1 intermediates?

[tob]

Works on multiple Win 10 1709 here.

[gsus]

So I finally mange to fix the error. As @tdelmas suggested it was related to OCSP. I added this to the Apache vhost:

SSLUseStapling on
SSLStaplingReturnResponderErrors off
SSLStaplingResponderTimeout 5

As well as this to the ssl.conf file:
SSLStaplingCache “shmcb:/opt/bitnami/apache2/logs/ssl_stapling(128000)”

And that got rid of the error. Did not see this error before ISRG was in the Windows root store, but at least this solves it if anybody else runs into similar issues.

Thanks for all the help!!!

[JuergenAuer]

@gsus

And that got rid of the error. Did not see this error before ISRG was in the Windows root store, but at least this solves it if anybody else runs into similar issues.

Thanks. Good to know!

---

@tob

Works on multiple Win 10 1709 here.

With IE11, DST Root is used.