BlackBerry Site Blocked OS 10.3.2 Let's Encrypt Certificate

[keyboard]

In case anyone is still using the relatively "old" BlackBerry OS running before 10.3.3 (don't think SG telco will ever be releasing that anymore).

The browser blocks sites like blowingwind due to the Let's Encrypt certificate that is used.

Download the few certificates on other device and transfer them to your BB since you won't be able to access these sites using the BB browser - blocked.

https://letsencrypt.org/certificates/

Active

• ISRG Root X1 (self-signed)

Active

• Let’s Encrypt Authority X3 (IdenTrust cross-signed)
• Let’s Encrypt Authority X3 (Signed by ISRG Root X1)

Backup

 

• Let’s Encrypt Authority X4 (IdenTrust cross-signed)
• Let’s Encrypt Authority X4 (Signed by ISRG Root X1)

 

https://www.identrust.com/support/downloads

DST Root CA X3 - create a notepad and name the file with a .pem extension so the BB can recognise it for import (didn't figure out how to get the extract below from the website, so just copy and paste below to a notepad)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

 

Import all 6 files with .pem into, (repeat 6 times)

System Settings - Security and Privacy - Certificates - Import - Select Certificate - Import

1. dst-root-ca-x3.pem

2. isrgrootx1.pem

3. lets-encrypt-x3-cross-signed.pem

4. lets-encrypt-x4-cross-signed.pem

5. letsencryptauthorityx3.pem

6. letsencryptauthorityx4.pem

 

Sites should work now.