Why are LE full chain certs still bundled with ISRG Root X1

Because some android clients don't check the expiration for DST Root CA X3 and don't have ISRG Root X1.

There is a comparison between the two chains: Long (default) and Short (alternate) Certificate Chains Explained

6 Likes