Extending Android Device Compatibility for Let's Encrypt Certificates

  • This impacts Android operating systems prior to 7.1.1:

    > IdenTrust has agreed to issue a 3-year cross-sign for our ISRG Root X1 from their DST Root CA X3. The new cross-sign will be somewhat novel because it extends beyond the expiration of DST Root CA X3. This solution works because Android intentionally does not enforce the expiration dates of certificates used as trust anchors.

  • So frustrating that an unmaintainable operating system was released into the world.

  • This is great news. This means many won't have to look to other alternatives for certs because of potential compatibility issues with old android devices.

  • This is great news. I also was worried about this issue.

  • Great! I wish these old devices are dead after three years.