Yes, e.g. some old OpenSSL and GnuTLS versions will fail due to this, but it was considered a lesser issue than failing on old Android versions (by default): ht

Yes, e.g. some old OpenSSL and GnuTLS versions will fail due to this, but it was considered a lesser issue than failing on old Android versions (by default): https://community.letsencrypt.org/t/questions-re-extending-android-device-compatibility/141047/6 https://community.letsencrypt.org/t/questions-re-extending-a... They will probably post details more prominently about that later. You can also still offer a chain that works with old OpenSSL and GnuTLS but not with old Android if you prefer that.