Honestly I’m curious, if people aren’t keeping their servers root certificate store updated, then what other lack of security is existing as well? If your root certificate has been updated at all in the past many years, you’d already be good for the old LE root non-dedicated certificate expiring as you would already have their own dedicated root certificate by this point.

CentOS published that just 2 weeks ago:

https://centos.pkgs.org/7/centos-updates-x86_64/ca-certificates-2021.2.50-72.el7_9.noarch.rpm.html

The last one was in early 2020? And it didn’t include the cert either? Surprising, lol