This is exactly the reason. The newer CA certs for let's encrypt were never loaded in the 3Ds because Nintendo dropped support before they were generated.
If I'm not mistaken there is a homebrew tool to load them. I lied, I can't find anything related to this.