Step 5, Signed Certificate Chain 3 certs about gethttpsforfree

[coupontom]

I noticed the same thing. I ended up installing the last two in the intermediate cert section for how my hosting imports certs. The SSL Checker on SSLShoper says the cert is installed correctly. I didnt notice any issues with Chrome, Firefox, Safari, Android Chrome as well.

I would love to understand more about what changed though.

[243826]

Third one seems to be a root/CA cert. Your browser should already have it. You should be fine with just the first and the second cert. I was; But out of curiosity I installed the third one as well and nothing changed in terms of the browser experience.

[diafygi]

Correct, the root cert is included by Let's Encrypt by default, since that root cert is also cross-signed by a previous older root cert, since the newer root cert may not be included in older Android devices. For newer devices that have the newer root cert, this doesn't affect anything, since the root cert is trusted already, so it is ignored.

https://letsencrypt.org/2020/12/21/extending-android-compatibility.html