# Why do Letsencrypt still add the expired root cert?

**URL:** <https://community.letsencrypt.org/t/why-do-letsencrypt-still-add-the-expired-root-cert/166676>\
**Category:** Issuance Tech\
**Created:** [November 30, 2021, 4:48pm UTC](https://community.letsencrypt.org/t/why-do-letsencrypt-still-add-the-expired-root-cert/166676 "2021-11-30T16:48:24Z")\
**Posts on this page:** 1\
**Showing post:** 2

<div class="post-metadata">

**Author:** ![Nummer378](https://sea3.discourse-cdn.com/letsencrypt/user_avatar/community.letsencrypt.org/nummer378/32/49862_2.png) [@Nummer378](https://community.letsencrypt.org/u/Nummer378)\
**Post date:** [November 30, 2021, 5:03pm UTC](https://community.letsencrypt.org/t/why-do-letsencrypt-still-add-the-expired-root-cert/166676/2 "2021-11-30T17:03:11Z")

</div>

> [@Long (default) and Short (alternate) Certificate Chains Explained](https://community.letsencrypt.org/t/long-default-and-short-alternate-certificate-chains-explained/162526):
>
> I…

> **[Extending Android Device Compatibility for Let's Encrypt Certificates - ...](https://letsencrypt.org/2020/12/21/extending-android-compatibility.html)**
>
> Update, May 13, 2021
> Please visit \[this post\] (https://community.letsencrypt.org/t/production-chain-changes/150739) on our community forum for the latest information about chain changes as some information about the changes and dates in this blog...

> [@Providing a longer certificate chain by default](https://community.letsencrypt.org/t/providing-a-longer-certificate-chain-by-default/148738):
>
> O…

> [@OpenSSL Client Compatibility Changes for Let’s Encrypt Certificates](https://community.letsencrypt.org/t/openssl-client-compatibility-changes-for-let-s-encrypt-certificates/143816):
>
> L…

Also note that we do not recommend fiddling with certificate chains manually. If you have a specific need to use the short chain, you should configure your ACME client to download this chain instead of deleting certificates manually. If you're running certbot 1.12 or higher, you can for example use the '`--prefered-chain` option to do this.

---

_[View the full topic](https://community.letsencrypt.org/t/why-do-letsencrypt-still-add-the-expired-root-cert/166676)._