As part of working on a brand new API, we use LetsEncrypt for generating ssl certificates. LetsEncrypts current X3-certificate expires at september 2021. They originally planned on making the X4 the default as of september 29 2021 (yesterday). But it turns out, they prolonged the change until Janu…

[image] _az: It depends what ACME client you use, but quite a lot of them now support selecting which root certificate to prefer. You just need to tell your client to prefer the "ISRG Root X1" certificate. As advertised for certbot here: Transition to ISRG's Root delayed until Jan 11 2021 - #…

Force X4 root in chain before it becomes default

Help

Osiris September 30, 2020, 9:17am 4

As advertised for certbot here: Transition to ISRG's Root delayed until Jan 11 2021 - #2 by jsha

2 Likes