We've posted an announcement about the availability and usage of the ECDSA hierarchy in production: https://community.letsencrypt.org/t/ecdsa-availability-in-production-environment/150679/2 If you have any questions or concerns, feel free to put them here!

So excited, going to fill out the form now! Already did test runs in staging weeks ago :slight_smile:

I am not sure whether this is the right place to ask. In the ECDAS allowlist request form, it asked ACME account ID. From the doc here ( Finding Account IDs - Let's Encrypt ), it said that the account ID is a URL of the form like: https://acme-v02.api.letsencrypt.org/acme/acct/12345678 I am using a…

[image] ybzhao: How can I get the account ID? For acme.sh, the account url can be found in this file: .acme.sh/ca/acme-v02.api.letsencrypt.org/ca.conf Where .acme.sh is the folder where acme.sh is installed (often ~/.acme.sh).

:wave: The announcement says: If you would like your account to be allow-listed for ECDSA issuance in Production, please fill out this form: https://forms.gle/ftKeqkj6AJgXUDPJ8 We'll be processing allow-list requests in batches, most of which will go out Thursday with our normal Production updat…

You don't have an official Let's Encrypt issued crystal ball, @cpu ? :astonished: :crystal_ball:

We are sending out confirmation notifications after the list is updated to the address provided in the form. There are a few wrinkles in the process that we're working to smooth out so this week's update is a little behind. We'll be improving it over the next week so there is less guessing involved. …

My auto renewal got me my first E1-issued cert today, but haven't got any email confirmation [yet]. You're probably still tuning knobs, right?

I laso didnt get any confirmation email yet, however since it was said allow list gets updated after maintenance i just tried to issue new cert from E1 on thursday, couple of hours after maintenance and it was already working.

I also got upgraded to ECDSA chain without receiving any e-mail confirmation. Anyway, my question is: would it be possible to provide alternate chain that would extend the current chain with the ISRG Root X1 certificate cross-signed by DST Root CA X3? This would help in minor cases where ISRG Root …

Questions re: Production ECDSA allow-list

Issuance Tech

Topic		Replies	Views
ECDSA intermediate issuance Help	14	5397	May 19, 2021
Lets Encrypt ECDSA certificate request for new accounts Issuance Tech	24	1707	December 7, 2023
ECDSA certificates by default and other upcoming changes in Certbot 2.0 Client dev	38	18707	May 31, 2025
ECDSA Root and Intermediates ISRG/Organizational	28	8447	June 11, 2020
"EC XXX bits (SHAXXXwithRSA)" versus "EC XXX bits (SHAXXXwithECDSA)"? What's the difference? Does it matter? Issuance Tech	24	6563	August 5, 2022

Questions re: Production ECDSA allow-list

Related topics