I am very curious about what the community thinks. After Sept 2021, they will no longer be co-signed by DST Root CA X3, and basically any platform from 2016 or older will not validate their certificates.
This is really frustrating for me-- I have lots of sites I switched to Let's Encrypt for the simplicity of it's auto-renew via certbot, as well as it being free of course.
But coming up in just a few months, MacOS 10.12 and below will reject my sites, not to mention a bunch more situations on this list: https://letsencrypt.org/docs/certificate-compatibility/. According to my stats, I still have visitors (not many, but still) coming in from some of these platforms.
I really wish they would just continue to be cross-signed by DST Root CA X3 (EDIT: or some other valid CA) for another 5 years :/
What is everyone else doing about this problem?