You may have noticed a setting on Android called Private DNS. It's on by default, and you're best off leaving it that way.
However, since DST Root CA X3 expires on September 1, 2021, Let's Encrypt will move to its own root certificate 'ISRG Root X1'. With this migration, Android OS versions prior to version 7.1.1 without ...