Join us and learn about certificate chains!

[Nummer378]

@gecko

I mostly wondered whether using the E1 chain, which we are evaluating in production, is just as viable of a solution to the DST Root expiration issue, as this alternative does not seem to having been mentioned

The E1 chain is just some intermediate(s) terminating at either ISRG Root X2 or ISRG Root X1.

Compatibility-wise, it is no better or worse than requesting the current R3 alternate chain (terminating at ISRG Root X1).

@gecko

Or is it not deemed ready to fully replace R3 yet

E1 will never replace R3, because they use different algorithms. R3 is RSA, while E1 is ECDSA. E1 is exclusively for ECDSA leafs, while R3 will in the future be exclusively for RSA leafs.

The only thing that will change is the current option of obtaining an ECDSA leaf signed by R3 (which will be removed at some point).