We are making use of letsencrypt staging certificates for internal dev use and it looks like after the maintenance performed on Feb 18th (today) the issuer has changed from "Fake LE Intermediate X1" to "(STAGING) Artificial Apricot R3" and the staging X1 certificates available on Staging Environment…

Hi @supericy , You can fetch the new staging root from http://stg-dst3.i.lencr.org/ (note! do not add to trust stores). The intermediates are served via ACME. Thanks for the reminder about the documentation page. We'll get that updated. :slight_smile:

Thank you @jsha , but the new root cert (STAGING) Doctored Durian Root CA X3 is expired on 30 Jan 2021, is this by purpose?

@jsha The root cert " CN=(STAGING) Doctored Durian Root CA X3" has expired on Jan 30.

@jsha For testing purpose we use the staging cert for ssl-verify some of the URLs . All our testcases are failing as the staging root CA is an expired cert. Please confirm if this is is bug in letsencrypt or intentional ?r equests.exceptions.SSLError (Caused by SSLError(SSLCertVerificationError(1, …

Here is how to get to the Doctored Durian Root CA X3 in PEM format. Download in DER format: $ curl http://stg-dst3.i.lencr.org/ > le-staging-root-durian.der Show detail: $ openssl x509 -inform der -in le-staging-root-durian.der -text -noout Certificate: Data: Version: 3 (0x2) …

FWIW, if anyone needs to do this without OpenSSL, PEM is just DER encoded into base64 with text-wrapping and a header/footer. In Python the conversions between the two formats are: import textwrap import base64 def convert_der_to_pem(der_data=None, header_object="CERTIFICATE"): """ :para…

To supplement @jvanasco 's excellent contribution, I've written a small bit of PHP that transforms an ECDSA CSR in PEM format to the Base64 DER format expected by the ACME protocol as the payload of order finalization. You can copy it from here then try it out at: https://extendsclass.com/php.html <…

New issuer for letsencrypt staging

Help

jgehrcke February 19, 2021, 3:55pm 7

@jsha I figured the expiry of the root CA cert deserves its own thread -- I have created (STAGING) Doctored Durian Root CA X3 is expired (breaks test environment).

Topic		Replies	Views
(STAGING) Doctored Durian Root CA X3 is expired (breaks test environment) Help	24	9778	March 5, 2021
Getting expired Root certificate(Doctorian Durian Root CA X3) for staging Help	1	854	August 25, 2022
Wrong/expired intermediate ca(s) and root ca for staging env Issuance Tech	8	235	August 1, 2025
New staging certs Help	13	1969	June 11, 2024
Let's Encrypt Staging Root	10	7824	June 29, 2018

New issuer for letsencrypt staging

Related topics