We run an IoT service on https://mdash.net domain, which uses Let's Encrypt for keeping its certs auto-updated. Many of our clients still use CA certs cross-signed by IdenTrust’s DST Root CA X3. The recent update made them all disconnect, due to Shortening the Let's Encrypt Chain of Trust - Let's …

Until 2024-06-06 you can use the alternative chain provided by the ACME server. Assuming your ACME client supports that. From 2024-06-06 till 2024-09-30 you'd have to hard-code the long chain yourself, as it won't be provided by the ACME server any longer. After 2024-09-30 18:14:03 GMT the cross-s…

Extend cross-signed by IdenTrust’s DST Root CA X3 signed certs

Help

orangepizza April 12, 2024, 6:46pm 11

that's using short chian

4 Likes

Topic		Replies	Views
Shortening the Let's Encrypt Chain of Trust API Announcements	9	9047	September 30, 2024
Changes in June 2021 Issuance Tech	7	2338	May 16, 2021
How do we stick to IdenTrust cross-signed after September Help	5	1216	September 17, 2020
Renew DST Root CA X3 on IIS? Help	8	1899	December 25, 2021
DST Root CA X3 Expiration Help	16	2771	December 12, 2021

Extend cross-signed by IdenTrust’s DST Root CA X3 signed certs

Related topics