Test ISRG signed intermediate before transition on Jul 8th

Hi all,

I need to test some old embedded stuff but the LE test endpoint (https://valid-isrgrootx1.letsencrypt.org/) doesnt support TLS_RSA_WITH_3DES_EDE_CBC_SHA anymore.

Reason: LE has announced that it will change the default intermediate certificate:

“Subscribers who need to support very old TLS/SSL clients may wish to manually configure their servers to continue using the cross-signature from IdenTrust. You can test whether a given client will work with the newer intermediate by accessing our test site.”

What intermediate cert will be used from then on? I guess it’ll transtition from [1] to [2]?
[1] https://letsencrypt.org/certs/lets-encrypt-x3-cross-signed.pem.txt
[2] https://letsencrypt.org/certs/letsencryptauthorityx3.pem.txt

Thanks & best regards,

Yes, that's correct. You can configure a web server with legacy ciphersuites and the [2] intermediate for testing purposes.


This topic was automatically closed 30 days after the last reply. New replies are no longer allowed.