"This certificate was signed by an unknown authority"

you have to import the Let’s Encrypt Authority X3 cert into keychain access. Here is how :

  1. Download the certificate file

  2. Search “keychain access” in spotlight and open it

  3. On the left of keychain access, there is a menu with your keychains. Click on the “system” keychain (under the “login” keychain)

  4. Locate the certificate file that you downloaded in finder, then drag and drop it into the list of items in the keychain

Now, keychain access knows who sighed it and will tell safari that.