Login

Let's Encrypt's Gen Y (YE and YR bulleted below) Cross-Certified Subordinate CAs were issued in violation of CCADB policy which requires that the serverAuth EKU extension MUST be present in cross-signed intermediate certificates issued since June 15th 2025. Root YE and YR were issued September 3rd 2025 and are subject to the requirements. https://letsencrypt.org/certs/gen-y/root-ye-by-x2.txt https://letsencrypt.org/certs/gen-y/root-yr-by-x1.txt We temporarily disabled certificate issuance, dep...