This particular implementation uses UDP. I've just tested also TCP in another(DNS) framer implementation. Behavior regarding isComplete is the same.

Well, we have private root and it's published certificates are affected. Trustd throws error: Non-system-trusted leaf validity period longer than 825 days and issued on or after 1 July 2019 Why is that ? I thought private roots are unaffected. Attaching screenshots.

nobody ? @eskimo, come on 🙂