As mentioned in previous posts, you will need to install the [new root and intermediate certificates from] (https://letsencrypt.org/certificates/).
You will also need to delete expired certificates from ISRG*. This is not normally needed, and even advised against doing so as expired ones are still needed for previously encrypted data, but you do need to do so to delete it for Compass to work again.