
ISRG Root X2 is already widely trusted via a cross-sign from our ISRG Root X1.I am also facing the issue once I updated to Big Sur. We have submitted ISRG Root X2 to the Microsoft, Apple, Google, Mozilla, and Oracle root programs for inclusion. ISRG Root X2 (new ECDSA root) - coming soon

cannot handle SHA-2 signed certificates.You may want to visit this 2015-2017 community forum discussion for more information about compatibility. Soon, new versions of Chrome will also have their own root store. Firefox is the exception: it has its own root store. Debian >= jessie / 8 (with updates applied)īrowsers (Chrome, Safari, Edge, Opera) generally trust the same root certificates as the operating system they are running on.Ubuntu >= xenial / 16.04 (with updates applied).
JAVA 1.8 JVM FOR MAC ANDROID
JAVA 1.8 JVM FOR MAC UPGRADE
iPhone 5 and above can upgrade to iOS 10 and can thus trust ISRG Root X1.
JAVA 1.8 JVM FOR MAC UPDATE


Test your site with SSL Labs' Server Test. If you’re having an issue with modern platforms, the most common cause is failure to provide the correct certificate chain. If your certificate validates on some of the “Known Compatible” platforms but not others, the problem may be a web server misconfiguration. After September 2021, only those platforms that trust ISRG Root X1 will continue to validate Let’s Encrypt certificates ( with the exception of Android).

Some platforms can validate our certificates even though they don’t include ISRG Root X1, because they trust IdenTrust’s “DST Root CA X3” certificate. The main determining factor for whether a platform can validate Let’s Encrypt certificates is whether that platform trusts ISRG’s “ISRG Root X1” certificate.
