Hi, Here goes a quick workaround to ensure Onionspray -- a reverse HTTPS onionsite proxy -- can keep checking backend certificates issued with Let's Encrypt new roots: https://forum.torproject.org/t/onionspray-work-around-for-validation-backend... Found this issue recently in some services, so I'm sharing here just in case someone else has the same problem. (This is not about HTTPS certificates for frontend onionsites, but checking the certificates of the backend onionsites being proxied/onionized) -- Silvio Rhatto pronouns he/him Festina lente -- move slow and fix things. Written without a LLM (Large Language "Model"). I sent this message during my active hours, which might be different from yours. I'm fine if you take your time to answer, and usually takes some time for me to answer.