As far as I understand, renewing with the certbot flag --preferred-chain "ISRG Root X1" [^1] will drop the hack for Android < v7 support and allow older OpenSSL

As far as I understand, renewing with the certbot flag --preferred-chain "ISRG Root X1" [^1] will drop the hack for Android < v7 support and allow older OpenSSL versions to work again. [^1] https://community.letsencrypt.org/t/openssl-client-compatibility-changes-for-let-s-encrypt-certificates/143816 https://community.letsencrypt.org/t/openssl-client-compatibi...