# What happened here?

**URL:** <https://community.letsencrypt.org/t/what-happened-here/204652>\
**Category:** Help\
**Created:** [September 5, 2023, 6:41pm UTC](https://community.letsencrypt.org/t/what-happened-here/204652 "2023-09-05T18:41:20Z")\
**Posts on this page:** 3\
**Page:** 1

<div class="post-metadata">

**Author:** ![Giga](https://avatars.discourse-cdn.com/v4/letter/g/b9bd4f/32.png) [@Giga](https://community.letsencrypt.org/u/Giga)\
**Post date:** [September 5, 2023, 6:41pm UTC](https://community.letsencrypt.org/t/what-happened-here/204652/1 "2023-09-05T18:41:20Z")

</div>

Hello Folks,

i'm using the EFF Certbot along with the Cloudflare Plugin (DNS challenge). Recently, i discovered something unusual:

1. I got an ECDSA certificate signed by R3. But according to the Let's Encrypts [Chain of Trust](https://letsencrypt.org/certificates/), only E1 should sign ECDSA certificates, right? Or did i misunderstood something here?

2. This certificate is not listed in crt.sh database (the certificate has been issued 2 weeks ago).

Can someone explain what happened here?

BR,  
Giga

---

<div class="post-metadata">

**Author:** ![Osiris](https://avatars.discourse-cdn.com/v4/letter/o/839c29/32.png) [@Osiris](https://community.letsencrypt.org/u/Osiris)\
**Post date:** [September 5, 2023, 6:51pm UTC](https://community.letsencrypt.org/t/what-happened-here/204652/2 "2023-09-05T18:51:45Z")

</div>

> [@Giga](#):
>
> Or did i misunderstood something here?

Signing of ECDSA certs by E1 is opt-in only. If you're not on the opt-in list, your cert will be signed by R3, even if it's an ECDSA cert.

This is actually mentioned on the Chain of Trust page you've linked to by the way..

> [@Giga](#):
>
> This certificate is not listed in crt.sh database (the certificate has been issued 2 weeks ago).

Crt.sh is backlogged _a lot_, depending on the CT log. See [https://crt.sh/monitored-logs](https://crt.sh/monitored-logs) for current backlogs. One of the active Google CT logs is even backlogged 45 days!

There are other CT log aggregators, see [Certificate Transparency Search Resources](https://community.letsencrypt.org/t/certificate-transparency-search-resources/203368) for more of them.

---

<div class="post-metadata">

**Author:** ![system](https://global.discourse-cdn.com/letsencrypt/original/3X/c/a/ca6c06ea1ea201324bba7048c6841ce60236468d.png) [@system](https://community.letsencrypt.org/u/system)\
**Post date:** [October 5, 2023, 6:52pm UTC](https://community.letsencrypt.org/t/what-happened-here/204652/3 "2023-10-05T18:52:44Z")

</div>

This topic was automatically closed 30 days after the last reply. New replies are no longer allowed.