We are no longer supporting KK in future releases of Google Play services, and KK devices will not receive updated versions of the Play Services APK.
The Android KitKat (KK) platform was first released ~10 years ago and since then, we’ve introduced many innovative improvements and features for Android, which are unavailable on KK. As of July 2023, the active device count on KK is below 1% as more and more users update to the latest Android versions. Therefore, we are no longer supporting KK in future releases of Google Play services. KK devices will not receive versions of the Play Services APK beyond 23.30.99.
I remind to anyone that any website using a letsencrypt SSL certificate won't be accessible from android<7 next year, unless the owner manually changes the default browser to Firefox.
Basically everyone using Android<7 won't be able to access 6% of global websites because of the expired root certificates. They won't know how to bypass the warning nor how to install Firefox, they will just buy a new phone
I'm not sure if it's even just as easy as "use Firefox" like the original comment implies. For your web browser, sure. But presumably these root certs are used by all apps. And thus many apps that depend on the internet would break (most wouldn't do what Firefox does and being your own root CA certs).