I would like to reinterate the importance of adding more than just one CA to the trusted roots if necessary. Please check if other (free) CAs you might want to use as a backup CA in the future (if something happens to LE for example, you never know) are included in the OS root store and if they can be used if you're using some way like TrustManager to trust ISRG Root X1,2 in your app.