# Independent audits of Let's Encrypt finished

**URL:** <https://community.letsencrypt.org/t/independent-audits-of-lets-encrypt-finished/6518>\
**Category:** Uncategorized\
**Created:** [December 9, 2015, 9:57pm UTC](https://community.letsencrypt.org/t/independent-audits-of-lets-encrypt-finished/6518 "2015-12-09T21:57:58Z")\
**Posts on this page:** 6\
**Page:** 1

<div class="post-metadata">

**Author:** ![rugk](https://sea3.discourse-cdn.com/letsencrypt/user_avatar/community.letsencrypt.org/rugk/32/19612_2.png) [@rugk](https://community.letsencrypt.org/u/rugk)\
**Post date:** [December 9, 2015, 9:57pm UTC](https://community.letsencrypt.org/t/independent-audits-of-lets-encrypt-finished/6518/1 "2015-12-09T21:57:58Z")

</div>

[After there was some criticism](https://bugzilla.mozilla.org/show_bug.cgi?id=1230797) ([discussion](https://community.letsencrypt.org/t/neuer-bereicht-uber-le-bei-heise/6476)) about the fact that LE already issues certs, but does not was audited independently, it now seems that the audit of the CA finished today.

At least such documents were already published:

- [https://letsencrypt.org/documents/LE\_WebTrustforBR.pdf](https://letsencrypt.org/documents/LE_WebTrustforBR.pdf)
- [https://letsencrypt.org/documents/LE\_WebTrustforCA.pdf](https://letsencrypt.org/documents/LE_WebTrustforCA.pdf)

---

<div class="post-metadata">

**Author:** ![Osiris](https://avatars.discourse-cdn.com/v4/letter/o/839c29/32.png) [@Osiris](https://community.letsencrypt.org/u/Osiris)\
**Post date:** [December 9, 2015, 10:09pm UTC](https://community.letsencrypt.org/t/independent-audits-of-lets-encrypt-finished/6518/2 "2015-12-09T22:09:39Z")

</div>

![](https://global.discourse-cdn.com/letsencrypt/original/2X/d/d1435f50273766bf3067eed6f95f7bd5be876c3c.jpg)

Ofcourse those guys from other “”“free”"" CA’s are whining about Let’s Encrypt. But I won’t shed a tear if they’ll go out of business. Yes, I’m talking about a certain CA with their ridiculous revocation costs for their free certificates and their position after HeartBleed… 😠

Go Let’s Encrypt, go! 😃

---

<div class="post-metadata">

**Author:** ![eva2000](https://sea3.discourse-cdn.com/letsencrypt/user_avatar/community.letsencrypt.org/eva2000/32/289_2.png) [@eva2000](https://community.letsencrypt.org/u/eva2000)\
**Post date:** [December 9, 2015, 10:12pm UTC](https://community.letsencrypt.org/t/independent-audits-of-lets-encrypt-finished/6518/3 "2015-12-09T22:12:28Z")

</div>

thanks for the heads up @rugk

---

<div class="post-metadata">

**Author:** ![tlussnig](https://sea3.discourse-cdn.com/letsencrypt/user_avatar/community.letsencrypt.org/tlussnig/32/2053_2.png) [@tlussnig](https://community.letsencrypt.org/u/tlussnig)\
**Post date:** [December 9, 2015, 10:16pm UTC](https://community.letsencrypt.org/t/independent-audits-of-lets-encrypt-finished/6518/4 "2015-12-09T22:16:17Z")

</div>

I add the link to these documents in the bug [https://bugzilla.mozilla.org/show\_bug.cgi?id=1204656](https://bugzilla.mozilla.org/show_bug.cgi?id=1204656)

---

<div class="post-metadata">

**Author:** ![kroboto](https://sea3.discourse-cdn.com/letsencrypt/user_avatar/community.letsencrypt.org/kroboto/32/288_2.png) [@kroboto](https://community.letsencrypt.org/u/kroboto)\
**Post date:** [December 9, 2015, 10:17pm UTC](https://community.letsencrypt.org/t/independent-audits-of-lets-encrypt-finished/6518/5 "2015-12-09T22:17:55Z")

</div>

I doubt they will go out of business. They may be forced to change certain policies and practices to be seen as a better option than LE. They already offer wildcard and OV/EV certs. Not free but way cheaper than many other CAs.

I suspect LE will have a net positive impact on the DV cert market. If nothing else LE offerings should drive down the cost.

---

<div class="post-metadata">

**Author:** ![rugk](https://sea3.discourse-cdn.com/letsencrypt/user_avatar/community.letsencrypt.org/rugk/32/19612_2.png) [@rugk](https://community.letsencrypt.org/u/rugk)\
**Post date:** [December 11, 2015, 9:46pm UTC](https://community.letsencrypt.org/t/independent-audits-of-lets-encrypt-finished/6518/6 "2015-12-11T21:46:42Z")

</div>

Interesting that there is still no official statement about this. At least one [German news site](http://www.heise.de/security/meldung/Audit-von-Let-s-Encrypt-aufgetaucht-3042537.html) is already going crazy (😉) , because these reports appeared so “suddenly” and it seems to be a mystery that the documents are dated to be from the 8th/9th of November.

So @LEstaff: I think a blog post might be helpful.