I am having a strange issue I cannot find the cause of: I have a website certificate issued on 31.07.2021 by letsencrypt.org and valid until 29.11.2021, however on my main iPhone (iOS 15) I get this error saying "Expired 29.09.2021" (on any browser: chrome, safari, etc):
The certificate is not revoked, I checked with both letsencrypt.org and https://certificate.revocationcheck.com. As mentioned on any other devices (laptop, other iPhones and iPads, desktop) the certificate is trusted and shows as valid. Or if I manually set my date on my main iPhone prior 29.09.2021 the certificate is working. Seems like a "manual" not trusted entry somewhere on my main iPhone, but I don't know where to check, I tried turning the phone off and on and clearing browser caches
I even tried issuing a new trusted certificate from letsencrypt.org but it says the same thing "Expired 29.09.2021" even if this is a totally new certificate, so there might be something related to the domain name?
I also checked "Certificate Trust Settings" on my main iPhone and other iPhones and the Trust Store Version and Trust Asset Version are identical (2021072200, however also weird that support.apple.com says the version for iOS 15 is 2021070500 https://support.apple.com/en-us/HT212773)
I am aware I should post the full certificate for full help but for privacy issues I'd avoid that until actually necessarily, maybe there's some known option causing this that I am not aware of
EDIT: I am seeing something possibly related (https://letsencrypt.org/docs/dst-root-ca-x3-expiration-september-2021/ / https://community.letsencrypt.org/t/production-chain-changes/150739), but my certificate chain is "R3 <- ISRG Root X1" and not "R3 <- DST Root CA X3" which expired today. Weird coincidence
EDIT 2: More info here https://scotthelme.co.uk/lets-encrypt-old-root-expiration/, some comments mention a possible fail due to the same name for the intermediate "R3" in chain, even though your certificate has the new "R3 issued by ISRG Root X1" your phone cache may have the old "R3 issued by DST Root CA X3" and not check for the new one...??? this would explain why the error only my main phone (where I used the certificate in the past so I may have a cached version of that "R3" intermediary...???)