The root CA for Let's Encrypt (ISRG root X1) is now part of Debian's Jessie, Stretch and Sid releases https://letsencrypt.org/2016/08/05/le-root-to-be-trusted-by-mozilla.html
Submitted on 16 January 2017 09:47:00 By Laura Arjona Reina