Doesn't Oak 2020 still have unexpired certificates in it?(no it isn't)

Issuance Policy
10

The urls are correct, but I did not add the RFC 6962 endpoint information to them.

Example:

$ curl -s https://ct.googleapis.com/logs/eu1/mirrors/letsencrypt_oak2019/ct/v1/get-sth
{"tree_size":559850441,"timestamp":1614174696273,"sha256_root_hash":"L8YCwGPzBaLlLNPfUYvBBD7+HxOlspzqauPYofrY6sg=","tree_head_signature":"BAMARzBFAiBH2+EQekg/AjWc+6ftHJ5tZ1mtUvTbVn95mW5HVoo9eQIhAJfsbJNOq5/oOrMpIK5GiNIMgkw6VwqJomqD2a/IQTKs"}

$ curl -s https://oak.ct.letsencrypt.org/2019/ct/v1/get-sth
{"tree_size":559850441,"timestamp":1614174696273,"sha256_root_hash":"L8YCwGPzBaLlLNPfUYvBBD7+HxOlspzqauPYofrY6sg=","tree_head_signature":"BAMARjBEAiAzni+WOhX8uVZnI2CWvuF2sfkgj3mQFxE+mIiBC9e01gIgGrIBRK/m2WFp22FVXiwcOYgVD39Hj5+Pt0hfpbT4QN0="}

###################

$ curl -s https://ct.googleapis.com/logs/eu1/mirrors/letsencrypt_oak2020/ct/v1/get-sth
{"tree_size":566652310,"timestamp":1614167537556,"sha256_root_hash":"5jhWRmb17hGNvwBxx9w0D9U42ZkssZqSex1Dh0vuyeU=","tree_head_signature":"BAMARzBFAiAUPeW/RdX50WEohAWXz54ofgQZoVd4f4of7FRemtcScwIhAJhZvXjVHIzqXQ8DzuZN3Fo6D1xUwwFOd4Lg6sVdpZ4e"}

$ curl -s https://oak.ct.letsencrypt.org/2020/ct/v1/get-sth
{"tree_size":566652310,"timestamp":1614167537556,"sha256_root_hash":"5jhWRmb17hGNvwBxx9w0D9U42ZkssZqSex1Dh0vuyeU=","tree_head_signature":"BAMARzBFAiAUPeW/RdX50WEohAWXz54ofgQZoVd4f4of7FRemtcScwIhAJhZvXjVHIzqXQ8DzuZN3Fo6D1xUwwFOd4Lg6sVdpZ4e"}

The tree_head_signature on each shard will change periodically until said shard is frozen.

6 Likes