Clear Cached SSL Certificates
Let's Encrypt DST Root CA X3 and intermediary R3 certificates have expired a couple days ago. I have a Plex server that uses a certificate from Let's Encrypt but it is signed by ISRG instead of DST. When I visit the site with an iOS or tvOS device I get a certificate error. Using the TLS Inspector app on my iPhone I am able to see that my Plex certificate is valid but the R3 and DST CA is expired causing it to fail. If I visit the site on a iOS device that never visited it before it works and I can see the certificate is valid. If I factory reset a device that isn't working then, after reinstalling, it works. This all points me to my device is caching the old intermediary and root certificate and refusing to update.
My question is how do I clear cached certificates on an AppleTV or iPhone? So far I have tried clearing Safari's cache, resetting the network settings, removing and reinstalling the app, and restarting the device and none of these have worked. This is different than if I manually trusted a certificate or have a certificate installed via a profile.
More info on the expired certificates can be found here:
https://letsencrypt.org/docs/dst-root-ca-x3-expiration-september-2021/
Safari shows this when I view the certificate:
More Details shows this:
As you can see the Plex certificate is valid but it shows it as expired. I used TLS Inspector to see the certificate chain and it shows this:
If I visit the same site on a non Apple device it shows the correct certificate chain:
[Image Edited by Moderator to Remove Personal Information]