Hmm, you could but how old is your /etc/ssl/certs/ca-certificates.crt file? It seems like something is still presenting the ISRG Root X1 intermediate instead of using ISRG Root X1 (self-signed)
Does Arch linux have a command for updating ca certificates? Like update-ca-certificates?