Support for OCSP Must-Staple Now Disabled

As previously announced in Ending OCSP Support in 2025, Let’s Encrypt has now disabled support for requesting certificates with the OCSP Must-Staple extension. Accounts that requested a Must-Staple certificate after October 18, 2024, have an extension until May 7, 2025, to allow time to change ACME client configurations to not request OCSP Must-Staple. Issuance requests that include the OCSP Must Staple extension from all other accounts will now fail.

For more information about OCSP, the Must-Staple extension, and the timeline of upcoming changes, please see the Ending OCSP Support in 2025 post on our website.

If you have any questions, please do not hesitate to open a help thread on this forum.

12 Likes