The current certificate chain that LetsEncrypt's certbot install, is invalid. This chain creates all sorts of issues with vulnerability scanners that we now have to address. We cannot rely on client-side devices to verify the chain of trust. Please provide a valid chain of trust that will automatic…

Provide a valid certificate chain

mcpherrinm February 28, 2023, 1:51pm 9

I don’t think that decision has been made yet. It’s not one to be taken lightly, with significant compliance and compatibility implications, and there’s good reason to choose both options.

7 Likes

IdentTrust DST Root CA X3 after september '24

Topic		Replies	Views
Why do Letsencrypt still add the expired root cert? Issuance Tech	19	2831	November 30, 2021
Understanding DST Root expiry and the older default cert chain Help	36	3432	December 8, 2021
Cert Chain issue Help	5	476	May 26, 2023
Why is LetsEncrypt issuing certificates with the old root Help	4	652	November 6, 2021
DST Root CA X3 Expiration Help	16	2714	December 12, 2021

Provide a valid certificate chain

Related topics