Staging E5-by-X2 - expected Bogus Broccoli X2

Issuance Tech
1

I see that the current chain for staging E5 and E6 are via X1, and that an alternate chain E5-by-X2 will be available. Starting a public thread for more information per @mcpherrinm

EDIT: merged posts

Sorry, the original question was:

I just generated some staging certs, and it looks like Pseudo Plum E5 and False Fennel E6 are issued by Pretend Pear X1, but I would have expected Bogus Broccoli X2 like Ersatz Edamame E1.
Can you confirm if that is the intended issuance chain?

2

We go over this in the blog post: New Intermediate Certificates - Let's Encrypt

We want to use ECDSA intermediates in production, signed by our highest compatibility root (X1).

So we are defaulting to ecdsa leaf certs being signed by an ecdsa intermediate, which is signed by our C1 root.

If you want a pure ecdsa chain to X2, that is available as an alternate chain via the usual ACME method.

4 Likes
3

Do you have a question or concern?

3 Likes
4

Sorry, the original question was:

I just generated some staging certs, and it looks like Pseudo Plum E5 and False Fennel E6 are issued by Pretend Pear X1, but I would have expected Bogus Broccoli X2 like Ersatz Edamame E1.
Can you confirm if that is the intended issuance chain?

1 Like
5

pkarnia had DM'ed me so I requested they make this post publicly in case somebody else had a similar question

4 Likes
6

This topic was automatically closed 30 days after the last reply. New replies are no longer allowed.