ECDSA Root and Intermediates

[jsha]

@tdelmas

Before the generation of the publicly trusted Root and Intermediates , do you plan:

• to publish a draft of the new hierarchy similarly to https://letsencrypt.org/certs/isrg-keys.png from https://letsencrypt.org/certificates/ ?
• to generate a fake hierarchy, so the community can give some feedback about it before the real creation?
• to give access to that fake hierarchy on the staging environment?

Will the new root (or intermediates) be cross signed with “ISRG Root X1” ?
Will the new root (or intermediates) be cross signed with “DST Root CA X3” or another widely trusted root ?

Thanks to @tdelmas for the very good idea, two years ago, that we should publish our proposed new hierarchy for community feedback before we issue from it. I've now done just that: Let's Encrypt new hierarchy plans.

I haven't yet generated a fake hierarchy matching the proposal but plan to do that soon. And we'll try to get something similar up on staging so people can see what it will act like in practice.