# DST Root CA X3 expiry countdown

**URL:** https://community.letsencrypt.org/t/dst-root-ca-x3-expiry-countdown/158964
**Category:** ISRG/Organizational
**Created:** [September 1, 2021, 1:10am UTC](https://community.letsencrypt.org/t/dst-root-ca-x3-expiry-countdown/158964 "2021-09-01T01:10:13Z")
**Posts on this page:** 20
**Page:** 1

<div class="post-metadata">

### Author: ![Nummer378](https://sea3.discourse-cdn.com/letsencrypt/user_avatar/community.letsencrypt.org/nummer378/32/49862_2.png) [@Nummer378](https://community.letsencrypt.org/u/Nummer378)
#### Post date: [September 1, 2021, 1:10am UTC](https://community.letsencrypt.org/t/dst-root-ca-x3-expiry-countdown/158964/1 "2021-09-01T01:10:13Z")

</div>

Given that the expiry is now less than a month away, I felt there was a need for some obligatory countdown page you can stare at and get mesmerized. Since I couldn't find one, I quickly hacked one together (very limited effort on my side, improvements welcome).

> **[Countdown to DST Root CA X3 expiry](https://germancoding.com/dst-root-ca-x3-expiry/)**
>
> Countdown to the expiry of the DST Root CA X3 certificate

---

<div class="post-metadata">

### Author: ![rg305](https://sea3.discourse-cdn.com/letsencrypt/user_avatar/community.letsencrypt.org/rg305/32/91314_2.png) [@rg305](https://community.letsencrypt.org/u/rg305)
#### Post date: [September 1, 2021, 1:14am UTC](https://community.letsencrypt.org/t/dst-root-ca-x3-expiry-countdown/158964/2 "2021-09-01T01:14:14Z")

</div>

I'll use it as a night light!

---

<div class="post-metadata">

### Author: ![jple](https://avatars.discourse-cdn.com/v4/letter/j/c5a1d2/32.png) [@jple](https://community.letsencrypt.org/u/jple)
#### Post date: [September 1, 2021, 1:32am UTC](https://community.letsencrypt.org/t/dst-root-ca-x3-expiry-countdown/158964/3 "2021-09-01T01:32:35Z")

</div>

I don't know what emotion to feel in this moment but the countdown itself sure made me laugh! 😂

---

<div class="post-metadata">

### Author: ![Nummer378](https://sea3.discourse-cdn.com/letsencrypt/user_avatar/community.letsencrypt.org/nummer378/32/49862_2.png) [@Nummer378](https://community.letsencrypt.org/u/Nummer378)
#### Post date: [September 1, 2021, 1:34am UTC](https://community.letsencrypt.org/t/dst-root-ca-x3-expiry-countdown/158964/4 "2021-09-01T01:34:14Z")

</div>

Styling on mobile is somehow broken right now... It worked like 20 mins ago. Now I remember why I never wanted to work in web design.

Edit: Apparently fixed it.

---

<div class="post-metadata">

### Author: ![griffin](https://sea3.discourse-cdn.com/letsencrypt/user_avatar/community.letsencrypt.org/griffin/32/50204_2.png) [@griffin](https://community.letsencrypt.org/u/griffin)
#### Post date: [September 1, 2021, 1:36am UTC](https://community.letsencrypt.org/t/dst-root-ca-x3-expiry-countdown/158964/5 "2021-09-01T01:36:57Z")

</div>

Looks fine to me on Samsung Internet on a Samsung Galaxy S10.

 ![Screenshot_20210831-193619_Samsung Internet](https://global.discourse-cdn.com/letsencrypt/original/3X/4/b/4bcb52f8006985c5ef705c5cab3c067456776e05.jpeg)

---

<div class="post-metadata">

### Author: ![griffin](https://sea3.discourse-cdn.com/letsencrypt/user_avatar/community.letsencrypt.org/griffin/32/50204_2.png) [@griffin](https://community.letsencrypt.org/u/griffin)
#### Post date: [September 1, 2021, 1:38am UTC](https://community.letsencrypt.org/t/dst-root-ca-x3-expiry-countdown/158964/6 "2021-09-01T01:38:25Z")

</div>

By fine, I mean it looks like a properly-formatted doomsday clock...

⏱

💣

---

<div class="post-metadata">

### Author: ![jvanasco](https://sea3.discourse-cdn.com/letsencrypt/user_avatar/community.letsencrypt.org/jvanasco/32/55900_2.png) [@jvanasco](https://community.letsencrypt.org/u/jvanasco)
#### Post date: [September 1, 2021, 2:29am UTC](https://community.letsencrypt.org/t/dst-root-ca-x3-expiry-countdown/158964/7 "2021-09-01T02:29:37Z")

</div>

> [@Nummer378](#):
>
> mesmerized

mesmerized.

---

<div class="post-metadata">

### Author: ![rg305](https://sea3.discourse-cdn.com/letsencrypt/user_avatar/community.letsencrypt.org/rg305/32/91314_2.png) [@rg305](https://community.letsencrypt.org/u/rg305)
#### Post date: [September 1, 2021, 2:30am UTC](https://community.letsencrypt.org/t/dst-root-ca-x3-expiry-countdown/158964/8 "2021-09-01T02:30:53Z")

</div>

> [@jvanasco](#):
>
> > [@Nummer378](#):
> >
> > mesmerized
> 
> mesmerized.

mesmerized..

---

<div class="post-metadata">

### Author: ![webprofusion](https://sea3.discourse-cdn.com/letsencrypt/user_avatar/community.letsencrypt.org/webprofusion/32/85310_2.png) [@webprofusion](https://community.letsencrypt.org/u/webprofusion)
#### Post date: [September 1, 2021, 2:37am UTC](https://community.letsencrypt.org/t/dst-root-ca-x3-expiry-countdown/158964/9 "2021-09-01T02:37:41Z")

</div>

Needs a Dark Mode.

I'm still a little nervous that windows is going to smoothly handle the R3 changeover..

---

<div class="post-metadata">

### Author: ![rg305](https://sea3.discourse-cdn.com/letsencrypt/user_avatar/community.letsencrypt.org/rg305/32/91314_2.png) [@rg305](https://community.letsencrypt.org/u/rg305)
#### Post date: [September 1, 2021, 2:43am UTC](https://community.letsencrypt.org/t/dst-root-ca-x3-expiry-countdown/158964/10 "2021-09-01T02:43:57Z")

</div>

> [@webprofusion](#):
>
> I'm still a little nervous that windows is going to smoothly handle the R3 changeover..

There is already a perfectly good "in case of emergency break glass" workaround option in the plan:  
[Temporarily switch to another FREE CA until this gets resolved permanently]  
Given: There may be the production hit taken.  
So, for the super fearful, maybe the preventive measure is to implement the workaround just before the expected possible impact. And switchback after the all clear has been sounded.

> [@webprofusion](#):
>
> Needs a Dark Mode.

But how will I...

> [@rg305](#):
>
> use it as a night light!

LOL

---

<div class="post-metadata">

### Author: ![webprofusion](https://sea3.discourse-cdn.com/letsencrypt/user_avatar/community.letsencrypt.org/webprofusion/32/85310_2.png) [@webprofusion](https://community.letsencrypt.org/u/webprofusion)
#### Post date: [September 1, 2021, 2:55am UTC](https://community.letsencrypt.org/t/dst-root-ca-x3-expiry-countdown/158964/11 "2021-09-01T02:55:07Z")

</div>

> [@rg305](#):
>
> So, for the super fearful, maybe the preventive measure is to implement the workaround just before the expected possible impact

Ha yeah, I'm keeping that one in my back pocket but unfortunately I actually can't contact 96% of my users because I don't collect their email address 🙂 - short sightedness on my part! I wouldn't want to scare them anyway especially as it _should_ all go off without a hitch.

---

<div class="post-metadata">

### Author: ![rg305](https://sea3.discourse-cdn.com/letsencrypt/user_avatar/community.letsencrypt.org/rg305/32/91314_2.png) [@rg305](https://community.letsencrypt.org/u/rg305)
#### Post date: [September 1, 2021, 2:55am UTC](https://community.letsencrypt.org/t/dst-root-ca-x3-expiry-countdown/158964/12 "2021-09-01T02:55:48Z")

</div>

Prepare the ALERT PAGE

---

<div class="post-metadata">

### Author: ![Osiris](https://avatars.discourse-cdn.com/v4/letter/o/839c29/32.png) [@Osiris](https://community.letsencrypt.org/u/Osiris)
#### Post date: [September 1, 2021, 8:49am UTC](https://community.letsencrypt.org/t/dst-root-ca-x3-expiry-countdown/158964/13 "2021-09-01T08:49:34Z")

</div>

Oeehh, nice!

Can't we have this countdown at the top of the Community? Like just as the disruption banner?

Pleaaasseeee? Looking at @jple here 😛

 ![](https://global.discourse-cdn.com/letsencrypt/original/3X/0/d/0d0f078401904890c7a843e277023d2799307ecf.gif)

---

<div class="post-metadata">

### Author: ![griffin](https://sea3.discourse-cdn.com/letsencrypt/user_avatar/community.letsencrypt.org/griffin/32/50204_2.png) [@griffin](https://community.letsencrypt.org/u/griffin)
#### Post date: [September 1, 2021, 4:25pm UTC](https://community.letsencrypt.org/t/dst-root-ca-x3-expiry-countdown/158964/14 "2021-09-01T16:25:55Z")

</div>

That's just wicked, @Osiris. 😁

---

<div class="post-metadata">

### Author: ![Nummer378](https://sea3.discourse-cdn.com/letsencrypt/user_avatar/community.letsencrypt.org/nummer378/32/49862_2.png) [@Nummer378](https://community.letsencrypt.org/u/Nummer378)
#### Post date: [September 1, 2021, 9:59pm UTC](https://community.letsencrypt.org/t/dst-root-ca-x3-expiry-countdown/158964/15 "2021-09-01T21:59:55Z")

</div>

> [@webprofusion](#):
>
> Needs a Dark Mode.

👍 This is now added. Automatically set based on what the browser indicates is the user preference.

---

<div class="post-metadata">

### Author: ![griffin](https://sea3.discourse-cdn.com/letsencrypt/user_avatar/community.letsencrypt.org/griffin/32/50204_2.png) [@griffin](https://community.letsencrypt.org/u/griffin)
#### Post date: [September 1, 2021, 10:06pm UTC](https://community.letsencrypt.org/t/dst-root-ca-x3-expiry-countdown/158964/16 "2021-09-01T22:06:06Z")

</div>

An ominous font paired with an occasional glitch in the countdown would really up the fear factor.

---

<div class="post-metadata">

### Author: ![Nummer378](https://sea3.discourse-cdn.com/letsencrypt/user_avatar/community.letsencrypt.org/nummer378/32/49862_2.png) [@Nummer378](https://community.letsencrypt.org/u/Nummer378)
#### Post date: [September 1, 2021, 10:09pm UTC](https://community.letsencrypt.org/t/dst-root-ca-x3-expiry-countdown/158964/17 "2021-09-01T22:09:45Z")

</div>

Still looking into some ~~magic~~ fancy things for when the countdown reaches the magic value. Sadly my CSS skills are limited.

---

<div class="post-metadata">

### Author: ![petercooperjr](https://sea3.discourse-cdn.com/letsencrypt/user_avatar/community.letsencrypt.org/petercooperjr/32/84698_2.png) [@petercooperjr](https://community.letsencrypt.org/u/petercooperjr)
#### Post date: [September 1, 2021, 10:15pm UTC](https://community.letsencrypt.org/t/dst-root-ca-x3-expiry-countdown/158964/18 "2021-09-01T22:15:00Z")

</div>

Probably when the countdown is done, the site should just change to an emulation of the browser's "this site can't be verified, are you sure you want to continue" page.

---

<div class="post-metadata">

### Author: ![griffin](https://sea3.discourse-cdn.com/letsencrypt/user_avatar/community.letsencrypt.org/griffin/32/50204_2.png) [@griffin](https://community.letsencrypt.org/u/griffin)
#### Post date: [September 1, 2021, 10:19pm UTC](https://community.letsencrypt.org/t/dst-root-ca-x3-expiry-countdown/158964/19 "2021-09-01T22:19:26Z")

</div>

* * *

# Encryption is now OFF

## All of your personal information (and questionable browsing habits) might be publicly exposed.

* * *

---

<div class="post-metadata">

### Author: ![griffin](https://sea3.discourse-cdn.com/letsencrypt/user_avatar/community.letsencrypt.org/griffin/32/50204_2.png) [@griffin](https://community.letsencrypt.org/u/griffin)
#### Post date: [September 1, 2021, 10:25pm UTC](https://community.letsencrypt.org/t/dst-root-ca-x3-expiry-countdown/158964/20 "2021-09-01T22:25:16Z")

</div>

I find it funny that some systems (and people) would rather use HTTP than HTTPS with an expired certificate in the chain. It's not like RSA (or EC or whatever) selectively and suddenly stops working when a certificate expires.

[Next page](https://community.letsencrypt.org/t/dst-root-ca-x3-expiry-countdown/158964.md?page=2)
