After Let's Encrypt changed their certification chain, one system cannot establish encrypted connections because certificate issued by ‘CN=R3,O=Let's Encrypt,C=US’ has expired.