Older LG webOS TVs (2017/2018) + TLS roots (DigiCert G2 / Let’s Encrypt X1) — looking for confirmation / workarounds

Hi everyone,

I’m trying to figure out TLS/root-certificate compatibility on older LG webOS TVs (mainly 2017/2018-era sets, typically webOS 3.x / 4.x).

We have a webOS Web App (WebView-based) that talks to our backend over HTTPS. We recently moved one of our API/CDN hostnames to a newer certificate chain (DigiCert “G2/G3 family”). On newer TVs everything is fine, but on some older LG TVs we start seeing weird behavior: users can often log in after clearing cookies, but logout/profile switching fails and the requests don’t seem to reach our servers (so it smells like a TLS validation / trust-store issue rather than just an app bug).

I’m hoping someone here has concrete info on these points:

  1. Do 2017/2018 LG webOS TVs normally trust DigiCert Global Root G2 / G3?
    If not, is there a known firmware/webOS version where this starts working?

  2. Are root CA updates tied to firmware updates on LG TVs, or is the trusted root set basically “fixed” per model year?

  3. If anyone has an older webOS TV handy: could you try opening these URLs in the TV browser and tell me whether they load or show a cert error?

    • https://global-root-g2.chain-demos.digicert.com/

    • https://valid.x1.test-certs.letsencrypt.org/ (Let’s Encrypt / ISRG Root X1)

  4. If G2/X1 don’t work on those models, what are people doing in practice to maintain HTTPS compatibility? (Different CA roots, legacy hostnames, anything else?)

If it helps, I can share example user-agent strings, model numbers we’re seeing, and exact symptom/repro steps.

Thanks in advance!

1 Like

Each webOS version has a list of trusted root certificates, and the TV only accepts certificates of which the root is one of the trusted root certificates. For more information, please refer to TLS and Root Certificates. Thank you.