The problem seems to be that 'ISRG Root X1' was only added to Mozilla::CA in version 20180117. Being the main CA for lets encrypt - any site using lets encrypt won't work if Mozilla::CA is older than 20180117.

You should probably update Mozilla::CA anyway because many entire dodgy CA's have been removed since 2018.