On 30th September 2021, the root certificate that Let's Encrypt are currently using, the IdentTrust DST Root CA X3 certificate, will expire. You may or may not need to do anything about this Root CA expiring, but I'm betting a few things will probably break on that day so here's

Many of you have asked for a more simple way to understand the chain changes coming up. We hope this helps and can be a thread we update consistently when more information is available. Always scroll down for the latest posts/information! And note that "end-entity certificate" is another way to say "leaf certificate” or “subscriber certificate”.   For certificates with RSA keys Through May 3, 2021    Default chain: End-entity certificate ← R3 ← DST Root CA X3    Alternate chain: End-entity certi...