Most websites utilize HTTPS to send information securely. Without these certificates, a good portion of the internet could fail to load. It turns out this could become a very real issue for anyone trying to surf the web on older Android devices as early as 2021, due to potential issues with certificate issuer Let’s Encrypt.
Currently, Let’s Encrypt is one of the larger authorities online that issues security certificates through a group called IdenTrust. The organization’s partnership with IdenTrust is set to expire as of September 1, 2021, and Android Police reports that there are currently no plans to enter a new one.
In the early days of Let’s Encrypt, the group applies for its own root certificate for all browsers and operating systems: ISRG Root X1. However, software that hasn’t been updated since 2016 doesn’t trust this certificate, and things are about to change even further next year.
Subsequently, all browsers and operating systems without the original Let’s Encrypt root certificate will cease working with any sites using the original certificates, including devices using Android 7.1 or lower.
The agreement’s end isn’t scheduled until September, but Let’s Encrypt is set to cease signing new certificates by January 11, 2011. While there will still be options for sites to cross-sign certificates until September, the default setting will be going away.
Affected devices can potentially install Firefox as their browser as a type of workaround that will include the ISRG Root X1 certificate. This isn’t a safe bet, and there will likely still be issues with websites loading improperly. Still, it may act as a holdover until some sort of fix is found.
