Let's Encrypt New Intermediate Certificates

[petercooperjr]

@aarongable

@petercooperjr

Is there any consideration that there's some specific old version of Android (7.0) that can handle P-256 signatures and not P-384 signatures?

The existing E1 and E2 keys would run into this already, so this isn't an issue for this upcoming key ceremony to care about, this is an issue for the "ECDSA For All" change to care about.

Perhaps, but I thought that this issue was one of the main reasons people might not want all their ECDSA certs signed by a P-384 ECDSA chain, which is why the current system might still be opt-in-only for now (though I may just be wildly speculating). Some people might want an ECDSA chain that only uses P-256 signatures, which they can get from other CAs (I think) but not with the Let's Encrypt current (or these proposed) intermediates.