Temp support for X1? Lost access to large number of devices

[Lorance]

Yes, but this sounds much more hopeful if I can find more information on how to accomplish this.

@wiggisser

Currently you are probably serving the default chain, which also contains the now expired DST Root X3 certificate. Openssl 1.0 can't deal with that. But you can (at least temporarily) switch to the alternative chain (on the server!). This alternative doesn't contain the DST Root X3, and therefore even the older openssl 1.0 should be able to deal with that.