Le plus simple dans cette histoire, serait de faire une app/tuto pour ajouter manuellement le certificat racine ISRG Root X1, non ?

Le plus simple dans cette histoire, serait de faire une app/tuto pour ajouter manuellement le certificat racine ISRG Root X1, non ?

Extending Android Device Compatibility for Let's Encrypt Certificates

Dec 21, 2020 • Josh Aas and Aaron Gable

We’re happy to announce that we have developed a way for older Android devices to retain their ability to visit sites that use Let’s Encrypt certificates after our cross-signed intermediates expire. We are no longer planning any changes in January that may cause compatibility issues for Let’s Encrypt subscribers.
....
IdenTrust has agreed to issue a 3-year cross-sign for our ISRG Root X1 from their DST Root CA X3. The new cross-sign will be somewhat novel because it extends beyond the expiration of DST Root CA X3. This solution works because Android intentionally does not enforce the expiration dates of certificates used as trust anchors. ISRG and IdenTrust reached out to our auditors and root programs to review this plan and ensure there weren’t any compliance concerns.

As such, we will be able to provide subscribers with a chain which contains both ISRG Root X1 and DST Root CA X3, ensuring uninterrupted service to all users and avoiding the potential breakage we have been concerned about.
...