11 stories tagged lets-encrypt, newest first.
247 points by gslin | 78 comments
Let's Encrypt community forum announcement that it is adding two new remote network perspectives for domain validation to meet CA/B Forum Baseline Requirements.
![Screenshot of letsencrypt.org: Let's Encrypt bans certificate usage in any US sanctioned territory [pdf]](https://hn.urlbox.com/shots/renders/2026/6/9/23f98053-92b7-4d53-af3d-b5a55042c924.jpg)
402 points by piskov | 333 comments
PDF diff of the Let's Encrypt Subscriber Agreement version 1.7 (June 4, 2026), the legal terms governing use of ISRG-issued SSL/TLS certificates.
490 points by jaas | 271 comments
Let's Encrypt blog post announcing general availability of short-lived six-day (160-hour) certificates and IP address certificates via the ACME 'shortlived' profile.
769 points by SGran | 318 comments
Let's Encrypt blog post by Josh Aas reflecting on ten years of issuing free, automated TLS certificates and its growth to the largest certificate authority.
742 points by phickey | 269 comments
NGINX Community Blog post announcing native support for the ACME protocol for automated TLS certificate issuance and renewal.
380 points by mcbain | 384 comments
Blog post by Rachel by the Bay explaining why she dropped her traditional paid TLS certificate and moved to ACME-issued certs, after long distrust of the protocol and clients.
403 points by gslin | 135 comments
The original November 2014 Let's Encrypt blog post announcing a new free, automated certificate authority to bring TLS to every website.
389 points by soheilpro | 133 comments
Let's Encrypt blog post announcing its intent to end OCSP support in favor of Certificate Revocation Lists, citing privacy risks of OCSP.
318 points by Dunedan | 154 comments
Let's Encrypt blog post announcing its deployment of ntpd-rs, a memory-safe Rust NTP implementation from the Prossimo project, across its infrastructure.
637 points by f311a | 257 comments
Blog post detailing discovery of a TLS man-in-the-middle interception of jabber.ru XMPP servers hosted on Hetzner and Linode using Let's Encrypt certificates.
496 points by healsdata | 258 comments
Let's Encrypt blog post (July 2023) announcing the end of the IdenTrust DST Root CA X3 cross-sign, shortening its default certificate chain.