Thank you for this topic! Folowed the update advice precisely. Unfortunately, I still have "non-secure" warning with Windows 7, some sites are now shown as safe, some not. A good example would be R3, it's shown as "not safe".
Common Name (CN) R3
Organization (O) Let's Encrypt
Organizational Unit (OU) <Not Part Of Certificate>