need to update ISRG Root X1 certificate compatibility page(DST Root CA X3 expiring)

[leedgdev]

as DST Root CA X3 will be expired at 2021-Sep, i think, we need to gather information and update/add ISRG Root X1 certificate compatibility page proactively.

ex) Known Compatible Windows 10 latest Mac OS >= 10.12.1 Sierra https://twitter.com/letsencrypt/status/790960929504497665

iOS >=10 https://support.apple.com/en-us/HT207177 Android >=7

Debian >= 8 https://launchpad.net/debian/+source/ca-certificates/20141019+deb8u2 Ubuntu >= 16.04 https://launchpad.net/ubuntu/+source/ca-certificates/20161102

Oracle's JDK 7 >= 7u151 (oracle customer only) https://www.oracle.com/java/technologies/javase/7-support-relnotes.html Oracle's JDK 8 >= 8u141, https://java.com/en/download/faq/release_changes.xml Open JDK >= 11 by default https://bugs.openjdk.java.net/browse/JDK-8191486

Firefox(NSS 3.26) >= 50 Mozilla NSS >= 3.26 https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.26_release_notes https://bugzilla.mozilla.org/show_bug.cgi?id=1283376

Checked Cents 6.9 latest Centos 7.x latest Windows 7 SP1 with update

Known Incompatible Android < 7.0 iOS < 9

Unknown Windows 10 < build ???? Centos/RHEL ? blackberry? Windows XP?

[rossnick]

Shoudn't this be pushed to the website ? Since the transition will begin in less than 2 months ?

[bdaehlie]

Thanks for the reminder, I requested review from some of our developers.