Will the changes at Certbot/snap/LE between now and 3/31/2026 mean a re-do of Certbot?

[Bruce5051]

Hmmm . . .

This makes me pause about the client certificate

@jsha

based on your posts, and TLS Requirements, I think you are trying to get Asterisk connect to us-east-va.sip.flowroute.com:5061 as a TLS client. Flowroute's instructions are unusual because they ask for a publicly trusted WebPKI certificate as a client certificate. Not totally invalid, but also not commonly done. (thanks to @rg305

Based on this

Continuing the discussion from New "Y" Root and Intermediate Hierarchy:

@aarongable

We intend to submit this hierarchy for inclusion in various trust stores over the next few months, and will begin issuance from the new intermediates in 2026, in concert with our removal of the TLS Client Auth EKU

But then again I might be misreading it all.