Removal of Client EKU Clarification

I use LetsEncrypt certificates for a webserver performing mTLS authentication.
I simply want to clarify/confirm my understanding of the changes from:
Ending TLS Client Authentication Certificate Support in 2026

"if you use Let’s Encrypt certificates as client certificates to authenticate to a server, this change may impact you.".

I'm assuming that my use case is not affected, as LE certs are only ever used as the server side certificate in a given connection.

Can someone from LE confirm?

3 Likes

Correct.

6 Likes

mTLS is only affected if you're using Let's Encrypt certificates on the client side. But usually the client certificate is issued by a private CA.

4 Likes

This topic was automatically closed 30 days after the last reply. New replies are no longer allowed.