letsencrypt.org on Hacker News

Let's Encrypt bans certificate usage in any US sanctioned territory [pdf](letsencrypt.org)

402 points by piskov 4 months ago | 333 comments

PDF diff of the Let's Encrypt Subscriber Agreement version 1.7 (June 4, 2026), the legal terms governing use of ISRG-issued SSL/TLS certificates.

A Post-Quantum Future for Let's Encrypt(letsencrypt.org)

298 points by SGran 4 months ago | 153 comments

The difficulty of making sure your website is broken(letsencrypt.org)

53 points by mcpherrinm 6 months ago | 24 comments

DNS-Persist-01: A New Model for DNS-Based Challenge Validation(letsencrypt.org)

304 points by todsacerdoti 8 months ago | 136 comments

6-Day and IP Address Certificates Are Generally Available(letsencrypt.org)

490 points by jaas 9 months ago | 271 comments

Let's Encrypt blog post announcing general availability of short-lived six-day (160-hour) certificates and IP address certificates via the ACME 'shortlived' profile.

10 Years of Let's Encrypt(letsencrypt.org)

769 points by SGran 10 months ago | 318 comments

Let's Encrypt blog post by Josh Aas reflecting on ten years of issuing free, automated TLS certificates and its growth to the largest certificate authority.

Decreasing Certificate Lifetimes to 45 Days(letsencrypt.org)

78 points by abraham 10 months ago | 50 comments

OCSP Service Has Reached End of Life(letsencrypt.org)

202 points by pfexec 1 year ago | 71 comments

Native ACME support comes to Nginx(letsencrypt.org)

162 points by Velocifyer 1 year ago | 74 comments

We've Issued Our First IP Address Certificate(letsencrypt.org)

48 points by soheilpro 1 year ago | 2 comments

LetsEncrypt – Expiration Notification Service Has Ended(letsencrypt.org)

145 points by zdw 1 year ago | 99 comments

How we reduced the impact of zombie clients(letsencrypt.org)

147 points by jaas 1 year ago | 30 comments

Ending TLS Client Authentication Certificate Support in 2026(letsencrypt.org)

43 points by pabs3 1 year ago | 27 comments

Sunlight: A certificate transparency implementation built for scalability, ease(letsencrypt.org)

6 points by fanf2 1 year ago | 1 comments

Six day and IP address certificate options in 2025(letsencrypt.org)

165 points by SGran 1 year ago | 115 comments

Let's Encrypt is 10 years old now(letsencrypt.org)

403 points by gslin 1 year ago | 135 comments

The original November 2014 Let's Encrypt blog post announcing a new free, automated certificate authority to bring TLS to every website.

Intent to end OCSP service(letsencrypt.org)

389 points by soheilpro 2 years ago | 133 comments

Let's Encrypt blog post announcing its intent to end OCSP support in favor of Certificate Revocation Lists, citing privacy risks of OCSP.

Letsencrypt Supports Wildcard Certificates(letsencrypt.org)

5 points by metadat 2 years ago | 5 comments

More Memory Safety for Let's Encrypt: Deploying ntpd-rs(letsencrypt.org)

318 points by Dunedan 2 years ago | 154 comments

Let's Encrypt blog post announcing its deployment of ntpd-rs, a memory-safe Rust NTP implementation from the Prossimo project, across its infrastructure.

New Intermediate Certificates(letsencrypt.org)

123 points by dfern 2 years ago | 49 comments

Sunlight, a Certificate Transparency log implementation(letsencrypt.org)

206 points by ben_s 2 years ago | 42 comments

The database servers powering Let's Encrypt (2021)(letsencrypt.org)

192 points by alexzeitler 3 years ago | 98 comments

Shortening the Let's Encrypt chain of trust(letsencrypt.org)

496 points by healsdata 3 years ago | 258 comments

Let's Encrypt blog post (July 2023) announcing the end of the IdenTrust DST Root CA X3 cross-sign, shortening its default certificate chain.