Internet Outage Atlas · Naming, identity, and trust

Let's Encrypt DST Root CA X3 Expiration

PKI expiration · September 2021

The expiration of DST Root CA X3 caused compatibility failures on older Android devices and legacy clients that still anchored trust there.

How it spread

Modern infrastructure stayed up while part of the user base lost the ability to connect cleanly.

Client compatibility can turn a certificate event into a real outage.
The lesson on the record
See this entry in the register →