Production Chain Changes

Hello again! Since the DST Root CA X3 expires at Sep 30 14:01:15 2021 GMT, here’s an update that may be helpful to you!

We have a page on our website that talks specifically about this expiration.

If you are using OpenSSL 1.0.2, there are several workarounds available.

If you are using very old versions of Firefox (prior to version 50, in November 2016) that no longer can receive updates of their root store, please upgrade to a newer version of Firefox.

Windows users may have some unique issues - please check out this write-up from @webprofusion.

Two weeks ago we spoke with Boulder developer Aaron Gable about this expiration in detail - check out the video here.

Here’s where you can find more information about the Let’s Encrypt Certificate Hierarchy.

We have extended Android device compatibility for Let’s Encrypt certificates through use of a cross-sign.

Andrew Ayer did a great write-up of fixing the breakage from the AddTrust External CA Root expiration in May 2020.

For all changes with our API, we post in the API Announcements category in our community forum. Sign in and hit the bell for notifications to be sent to your email!

We (and our community) are here for you! If you have any questions about this change, search on our community forum or post on the thread we have to help you with this very topic.

16 Likes