Understanding DST Root expiry and the older default cert chain

Help
34

Dont have a rooted android device with me, else would've tested in that itself. FWIW, I don't think Amazon made any such changes to trust store (at least I can see the same pem files content for DST root and ISRG X11 certs).

Also as expected the DST root cert has these dates on android:

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:af:b0:80:d6:a3:27:ba:89:30:39:86:2e:f8:40:6b
    Signature Algorithm: sha1WithRSAEncryption
        Issuer: O=Digital Signature Trust Co., CN=DST Root CA X3
        Validity
            Not Before: Sep 30 21:12:19 2000 GMT
            Not After : Sep 30 14:01:15 2021 GMT
        Subject: O=Digital Signature Trust Co., CN=DST Root CA X3
1 Like