Stan Hu
authored
LetsEncrypt depended on the DST Root CA X3 cert that expired in September. Clients need to trust the ISRG Root X1 for LetsEncrypt to function. The previous certs did include the X1 cert, but this update removes the expired X3 cert. This doesn't necessarily solve the LetsEncrypt issues since OpenSSL v1.1.1 defaults to finding the first trusted chain, but we should keep these certs up-to-date. Relates to https://gitlab.com/gitlab-org/gitlab/-/issues/342326 Changelog: fixed