Windows: invalid cert when fullchain.pem ISRG Root X1 is cross-signed by expired DST Root CA X3?

[Rip]

@archie172

why did Windows fail to validate the certificate in the first place when ISRG Root X1 was in fullchain.pem and in the Windows certificate store?

This may help...

Fixing Windows installs that don't receive updates to their trusted roots

C…