Keeyou

See more at Let's Encrypt [Chain of Trust](https://letsencrypt.org/certificates/) page.

> > By installing the cumulative update, the problem was resolved. Not sure how it might affects naiveproxy users. But that's an issue (maybe not so large). > > Oh,...

And it (missing ISRG X1 Root) also happens to some old Android release prior to 7.1.1 according to this post https://www.webmasterworld.com/webmaster/5015781.htm

TLS协议访问指定域名，除非是用了ECH，否则域名是明文的出现的，这个最好封

@segfault-bilibili if you don't mind, you can try [yass' android client](https://github.com/Chilledheart/yass/releases/download/1.8.1/yass-android-release-arm64-1.8.1.apk) which is written by me. no plugins and no other clients are required.