# Will Let's Encrypts own sites use Let's Encrypt certs? **URL:** \ **Category:** Site Feedback\ **Created:** [August 21, 2015, 5:24pm UTC](https://community.letsencrypt.org/t/will-lets-encrypts-own-sites-use-lets-encrypt-certs/386 "2015-08-21T17:24:56Z")\ **Posts on this page:** 8\ **Page:** 1
**Author:** ![rugk](https://sea3.discourse-cdn.com/letsencrypt/user_avatar/community.letsencrypt.org/rugk/32/19612_2.png) [@rugk](https://community.letsencrypt.org/u/rugk)\ **Post date:** [August 21, 2015, 5:24pm UTC](https://community.letsencrypt.org/t/will-lets-encrypts-own-sites-use-lets-encrypt-certs/386/1 "2015-08-21T17:24:56Z")
Just curious: If LE finally works and the root cert is in all major browsers (or at least the cross-signature is there) will the LE websites, like [https://letsencrypt.org/](https://letsencrypt.org/) and [https://community.letsencrypt.org/](https://community.letsencrypt.org/) also switch to certificates from Let’s Encrypt? ---
**Author:** ![Jeroen](https://sea3.discourse-cdn.com/letsencrypt/user_avatar/community.letsencrypt.org/jeroen/32/270_2.png) [@Jeroen](https://community.letsencrypt.org/u/Jeroen)\ **Post date:** [August 23, 2015, 12:11am UTC](https://community.letsencrypt.org/t/will-lets-encrypts-own-sites-use-lets-encrypt-certs/386/2 "2015-08-23T00:11:09Z")
I’m curious as well, why aren’t they dogfooding themselves? ---
**Author:** ![roland](https://sea3.discourse-cdn.com/letsencrypt/user_avatar/community.letsencrypt.org/roland/32/33298_2.png) [@roland](https://community.letsencrypt.org/u/roland)\ **Post date:** [August 23, 2015, 12:27am UTC](https://community.letsencrypt.org/t/will-lets-encrypts-own-sites-use-lets-encrypt-certs/386/3 "2015-08-23T00:27:46Z")
Our root certificate hasn’t been cross-signed by IdentTrust yet, so any certificates we issued for ourselves would be somewhat useless as nothing would trust them. Presumably once this cross-signature is in place we’ll either switch to a LE certificate or wait until the existing certificate expires before switching. ---
**Author:** ![Jeroen](https://sea3.discourse-cdn.com/letsencrypt/user_avatar/community.letsencrypt.org/jeroen/32/270_2.png) [@Jeroen](https://community.letsencrypt.org/u/Jeroen)\ **Post date:** [August 23, 2015, 12:30am UTC](https://community.letsencrypt.org/t/will-lets-encrypts-own-sites-use-lets-encrypt-certs/386/4 "2015-08-23T00:30:54Z")
You’ll know when something is wrong if you dogfood it. ---
**Author:** ![Moter8](https://sea3.discourse-cdn.com/letsencrypt/user_avatar/community.letsencrypt.org/moter8/32/8487_2.png) [@Moter8](https://community.letsencrypt.org/u/Moter8)\ **Post date:** [August 23, 2015, 5:17pm UTC](https://community.letsencrypt.org/t/will-lets-encrypts-own-sites-use-lets-encrypt-certs/386/5 "2015-08-23T17:17:41Z")
People want information from the LE sites. If they get a warning they won’t get this information. Putting an LE cert on their sites _right now_ is not wise. ---
**Author:** ![Meitzi](https://sea3.discourse-cdn.com/letsencrypt/user_avatar/community.letsencrypt.org/meitzi/32/494_2.png) [@Meitzi](https://community.letsencrypt.org/u/Meitzi)\ **Post date:** [September 9, 2015, 7:18pm UTC](https://community.letsencrypt.org/t/will-lets-encrypts-own-sites-use-lets-encrypt-certs/386/6 "2015-09-09T19:18:02Z")
Its not good idea. Lets make hypothetical case, where Lets Encrypts Root CA Private key leaks. (very unlikely) So, when Lets encrypts want to make announce for it, it is better NOT use that Root. ---
**Author:** ![david7364](https://sea3.discourse-cdn.com/letsencrypt/user_avatar/community.letsencrypt.org/david7364/32/3682_2.png) [@david7364](https://community.letsencrypt.org/u/david7364)\ **Post date:** [November 21, 2015, 1:05pm UTC](https://community.letsencrypt.org/t/will-lets-encrypts-own-sites-use-lets-encrypt-certs/386/7 "2015-11-21T13:05:01Z")
Your suggestion appears to have been done now. The site appears to redirect URLs with www prefix to the unprefixed version, perhaps to avoid needing a separate certificate for www-prefixed domain names. This is an interesting technique that should be in the information given to users. I see in the list of LE-generated certificates many instances of pairs of issued certificates, for websites that do not use this technique. ---
**Author:** ![rugk](https://sea3.discourse-cdn.com/letsencrypt/user_avatar/community.letsencrypt.org/rugk/32/19612_2.png) [@rugk](https://community.letsencrypt.org/u/rugk)\ **Post date:** [November 21, 2015, 4:35pm UTC](https://community.letsencrypt.org/t/will-lets-encrypts-own-sites-use-lets-encrypt-certs/386/8 "2015-11-21T16:35:25Z")
1. You do not need another certificate for the www subdomain. You can just use [SANs](https://community.letsencrypt.org/t/please-support-multi-domain-ssl-certificates-like-the-ones-on-positivessl/867/5?u=rugk) for this. 2. On LEs own website this is how it is used. One certificate for `www.letsencrypt.org` and `letsencrypt.org` is used. This makes it possible that [https://www.letsencrypt.org](https://www.letsencrypt.org) redirects to [https://letsencrypt.org](https://letsencrypt.org). 3. It is very common (and recommend) to use a cert with at least the `www` subdomain included as your default one, because there may always be users who type in `https://www..` and always users who only type in `https://.`. (Note that `https://` sometimes does not have to be typed in) If you would not do so such users may get scary SSL errors and they do not know what they did wrong.