Dear Community, I'm facing the same issue for my this website, https://www.onlinevidyalaya.net/ . Older Android devices and Windows 7 users are not able to access the website. To solve this issue, I followed this guideline, Let's Encrypt DST Root CA X3 expiry Sept 30th 2021 | Certify The …

Thanks a ton! @rmbolger It helped a lot, the issue has been resolved and working perfectly on older devices. Let's Encrypt community is very supportive and thanks a lot to experts like you who are working hard day and night to support this community. Everyone, please follow this link those who wa…

If you are going to server old Android devices then you will need to serve that trusted path. The one being served it NOT that one. [there are three trust paths - that one is the worst of them]

[image] parth.patel: Currently status is, ISRG Root X1 (self-signed) (which will expire in 2035) is moved to Untrusted Store. ISRG Root X1 (cross signed) (which will expire in 2024) is stored in trusted root store and Intermediate chain store. DST Root X3 (expired on 30th September, 2021) is s…

The need for system administrators to intervene to force the default chain in windows environment is frustrating. The default chain served by the ACME client via API really makes no difference if you are hosting a site with IIS, since it continues to serve only the alternative chain. Until hours ag…

When moving the self-signed certificate "ISRG Root X1" to "Untrusted Certificates" will not cause the ACME client to be unable to establish SSL connection to the Let's Encrypt API during the renewal or issuance of a new certificate? The Let's Encrypt API uses the self-signed ISRG Root X1 certified …

[image] Cryptoman: The need for system administrators to intervene to force the default chain in windows environment is frustrating. The default chain served by the ACME client via API really makes no difference if you are hosting a site with IIS, since it continues to serve only the alternative…

Excellent work. Thank you so much for the clarifications.

Glad I was able to help. Cheers!

I asked my users that have this issue to test your website, and it does not work at all. They still have an issue with their certificates. They have windows 7 if it can help you. Edit: I think that what misled you was maybe believing that opensea.io works for users with windows 7, but it's not so. …

This solution could be useful for those who can't search for their own certificates on their own servers, well I can't really imagine how it's possible to not know how to use a search tool by file extension but let's move on. On the other hand this solution is simply impossible for the client side.…

Cloudflare has their own CA from digicert (but probably in name only, probablly still managed by digicert people), not impacted by this. you actually need business+ tier to use your on certificate

Users of older Android and Windows 7 not able to access website

Help

Topic		Replies	Views
Android Browser Showing Security Risk or Connection Not Secured Help	33	6256	November 25, 2021
Windows 7 Chrome - NET::ERR_CERT_DATE_INVALID Help	56	24387	October 13, 2021
Help thread for DST Root CA X3 expiration (September 2021) Help	665	171672	December 26, 2021
DST Root CA X3 expiry countdown ISRG/Organizational	102	10734	October 1, 2021
R3 Intermediate certificate has expired Help	130	39497	October 2, 2021

Users of older Android and Windows 7 not able to access website

Related topics