I am trying to remove the expired **DST Root CA X3** Let's Encrypt SSL cert (expired yesterday) from a Debian server which is still appearing when I check in SSL Labs:

```
RSA 2048 bits (e 65537) / SHA1withRSA
Valid until: Thu, 30 Sep 2021 14:01:15 UTC
EXPIRED
Weak or insecure signature, but no impact on root certificate

```

I am still getting 'untrusted' message when some calls are made to the server and I believe it to the this which is the cause.

The above appears in the SSL Labs report under "Path #2: Not Trusted" and I'd like to remove it to see if this is the cause.

I have already done this:

* Commented out `DST Root CA X3` in `/etc/ca-certificates.conf`
* Performed an `update-ca-certificates` (It said 1 removed)
* Updated `certbot` and renewed the cert for the server.

But this is still appearing, how to remove it?

Thanks in advance.