Interesting.  IdenTrust, who cross-signs Let&#x27;s Encrypt, has been in the root CA lists for a long time.  (Mozilla merged this particular root certificate, DST Root X3, in 2008, as a replacement for existing expiring IdenTrust roots.)