Let's Encrypt Completes Transition: Full Retirement of DST Root CA X3

Executive Summary

Let's Encrypt has completed the final phase of retiring the legacy DST Root CA X3 cross-signature, moving entirely to the ISRG Root X1 and ISRG Root X2 trust anchors. This architectural milestone marks the end of a multi-year transition period designed to support older platforms, while formalizing strict modern root store requirements across all automated ACME certificate issuance.

Technical Analysis & Ecosystem Impact

For years, Let's Encrypt utilized a cross-signature from IdenTrust's DST Root CA X3 to ensure backwards compatibility with older operating systems—specifically Android devices running versions prior to 7.1.1, which lacked ISRG Root X1 in their system trust stores.

With the final expiration and retirement of the cross-signed hierarchy:

• Legacy Device Incompatibility: Embedded devices, IoT hardware, and legacy Android clients without updated system trust stores or custom root injection will reject TLS handshakes with @@@INLINECODE0@@@ or @@@INLINECODE1@@@.
• Shorter Certificate Chains: Issuance now serves a shorter certificate chain directly chaining to ISRG Root X1, reducing TLS handshake packet sizes and connection latency across high-throughput edge nodes.
• Strict Client Modernization: Headless API clients, older OpenSSL installations (pre-1.1.0), and unmaintained microservices must ensure local CA trust bundles (ca-certificates) are upgraded to include ISRG Root X1.

Recommended Actions

1. Audit Outbound Client Trust Stores: Inspect all legacy microservices, background job workers, and edge gateways to verify that ISRG Root X1 is installed in local trust stores (/etc/ssl/certs).
2. Review Mobile & IoT Telemetry: Monitor client handshake error rates for spikes in TLS handshake errors originating from legacy Android versions (7.1.1 and below).
3. Validate Active Chain Presentations: Confirm that automated renewal agents (such as Certbot or cert-manager) are serving the default modern chain rather than attempting to request obsolete alternate chains.