Transitioning to ISRG's Root (letsencrypt)

ciao70

• April 24, 2019 11:38

Hello, Please reconsider defaulting to the ISRG root - it's unsupported by more than 50% of Android phones In particular this post by ISRG Executive Director: "Only the default chain served via ACME will switch to using ISRG"s root directly in July. Using the default chain is not required, the cross-signature will remain available until September 2021. We are aware of issues with Android compatibility and will follow the situation. In the mean time if this is a concern for you please continue using the cross-signed intermediate and everything will continue working the way it does today." I wanted to know if from July, the automatic ssl renewal through Cpanel of Let's Encrypt will continue to use the current cross-signature DST root or the new ISRG Root X1? Thanks

• 

  cPanelLauren

  • April 25, 2019 20:41

  We use what is provided by Let's Encrypt, we don't manage any part of it nor do we have control over which chain will be used. I'd suggest inquiring with them as to what they'll offer. That thread you linked is going to be the best place for information on what is offered.

  0
• 

  ciao70

  • April 25, 2019 21:10

  Thanks :)

  0

Please sign in to leave a comment.