Let's Encrypt

[Sushubh]

Standing on Our Own Two Feet [Updated]

Update, July 10, 2023 See our new blog post for details on the September 2024 expiration of the newer ISRG Root X1 cross-sign from IdenTrust. Update, December 21, 2020 Thanks to community feedback and our wonderful partners at IdenTrust, we will be able to continue to offer service without...

letsencrypt.org

 

[Sushubh]

Extending Android Device Compatibility for Let's Encrypt Certificates

Update, May 13, 2021 Please visit this post on our community forum for the latest information about chain changes as some information about the changes and dates in this blog post are outdated. We’re happy to announce that we have developed a way for older Android devices to retain their ability...

letsencrypt.org

 

[Sushubh]

2022.01.25 Issue with TLS-ALPN-01 Validation Method

At 16:48 UTC on Tuesday Jan 25, 2022, a third party informed Let’s Encrypt / ISRG that, while examining the Boulder codebase, they had noticed two instances of specification non-compliance in our implementation of the “TLS Using ALPN” validation method (BRs 3.2.2.4.20, RFC 8737). As a result, we...

community.letsencrypt.org

 

[Navjot Singh]

Certbot Discontinuing Windows Beta Support in 2024

February 2024 will be our last release for the Windows Installer. Why The level of Windows support for Certbot varies depending on the core team's capacity to enhance and rectify issues with the Windows installer. Presently, Windows support is classified as Beta. This designation allows us the...

community.letsencrypt.org

The last Windows release was on February 9.

https://github.com/certbot/certbot/releases/tag/v2.9.0

 

[Navjot Singh]

Ending OCSP Support in 2025

Earlier this year we announced our intent to provide certificate revocation information exclusively via Certificate Revocation Lists (CRLs), ending support for providing certificate revocation information via the Online Certificate Status Protocol (OCSP). Today we are providing a timeline for...

letsencrypt.org

 

[Sushubh]

Decreasing Certificate Lifetimes to 45 Days

Let’s Encrypt will be reducing the validity period of the certificates we issue. We currently issue certificates valid for 90 days, which will be cut in half to 45 days by 2028. This change is being made along with the rest of the industry, as required by the CA/Browser Forum Baseline...

letsencrypt.org

 

[Sushubh]

6-day and IP Address Certificates are Generally Available

Short-lived and IP address certificates are now generally available from Let’s Encrypt. These certificates are valid for 160 hours, just over six days. In order to get a short-lived certificate subscribers simply need to select the ‘shortlived’ certificate profile in their ACME client...

letsencrypt.org