<div>
<br><a href="https://filedb.experts-exchange.com/incoming/2021/10_w41/1574359/darootx3.png" rel="ugc">darootx3.png</a>
</div>



darootx3.png [https://filedb.experts-exchange.com/incoming/2021/10_w41/1574359/darootx3.png]

darootx3.png

<div>
Did you remove the old Root CA certificate?
</div>


Did you remove the old Root CA certificate?

<div>
No, disabled it.&nbsp; But, if I am using cross-certificates then I wouldn't want to remove or disable it.
</div>


No, disabled it.  But, if I am using cross-certificates then I wouldn't want to remove or disable it.

<div>
I removed it as a test and uploaded the X1, X2 certs, no difference. &nbsp;Sites still say unsecure.
</div>


I removed it as a test and uploaded the X1, X2 certs, no difference.  Sites still say unsecure.

<div>
<div class="content wysiwyg-content fr-view">
<p>I have some older devices that cannot be upgraded. &nbsp;I am attempting to find a way to add the new ISRG Root X1, X2 certificates to allow them to browse the internet without having the problem caused by the <span id="isPasted" style=" text-align: left;">&nbsp;Let's Encrypt DST Root CA X3</span> expiration and certificate switch.</p><p><br></p><p>On a test machine I have added the three newer certificates with no change (ie. still does not work).</p><p><br></p><p>I read an article from Let's Encrypt indicating they have cross-signed certificates to keep older Androids working and I noticed in the <span id="isPasted" style=" text-align: left;">&nbsp;DST Root CA X3</span> root certificate on this Windows 7 machine there is an option for specifying additional cross-certificate locations which I presume will make the <span id="isPasted" style=" text-align: left;">&nbsp;DST Root CA X3</span> work again.</p><p><br></p><p>It wants a URL to be added for the cross-certificate.</p><p><br></p><p>Where can I find this/these URLs?&nbsp; Thanks.</p>
</div>
</div>



I have some older devices that cannot be upgraded.  I am attempting to find a way to add the new ISRG Root X1, X2 certificates to allow them to browse the internet without having the problem caused by the
 Let's Encrypt DST Root CA X3
expiration and certificate switch.
On a test machine I have added the three newer certificates with no change (ie. still does not work).
I read an article from Let's Encrypt indicating they have cross-signed certificates to keep older Androids working and I noticed in the
 DST Root CA X3
root certificate on this Windows 7 machine there is an option for specifying additional cross-certificate locations which I presume will make the
 DST Root CA X3
work again.
It wants a URL to be added for the cross-certificate.
Where can I find this/these URLs?  Thanks.

DST Root CA X3 expiration, adding cross-certificate URL locations for Windows 7

This topic area includes legacy versions of Windows prior to Windows 2000: Windows 3/3.1, Windows 95 and Windows 98, plus any other Windows-related versions including Windows Mobile.

Windows OS

Windows 7 is an operating system from Microsoft. Features include multi-touch support, a redesigned Windows Shell with a new taskbar, referred to as the Superbar, a home networking system called HomeGroup, and performance improvements.

Windows 7

HTTPS is a protocol for secure communication over a computer network which is widely used on the Internet. HTTPS consists of communication over Hypertext Transfer Protocol (HTTP) within a connection encrypted by Transport Layer Security (TLS) or its predecessor, Secure Sockets Layer (SSL). The main motivation for HTTPS is authentication of the visited website and to protect the privacy and integrity of the exchanged data. HTTPS is widely used for protecting page authenticity on all types of websites, securing accounts and keeping user communications, identity and web browsing private.