9 stories tagged tls-certificates, newest first.
247 points by gslin | 78 comments
Let's Encrypt community forum announcement that it is adding two new remote network perspectives for domain validation to meet CA/B Forum Baseline Requirements.
111 points by colinprince | 37 comments
Ars Technica article reporting that hackers compromised three domain registries and obtained unauthorized TLS certificates for Google and other large services.
![Screenshot of letsencrypt.org: Let's Encrypt bans certificate usage in any US sanctioned territory [pdf]](https://hn.urlbox.com/shots/renders/2026/6/9/23f98053-92b7-4d53-af3d-b5a55042c924.jpg)
402 points by piskov | 333 comments
PDF diff of the Let's Encrypt Subscriber Agreement version 1.7 (June 4, 2026), the legal terms governing use of ISRG-issued SSL/TLS certificates.
490 points by jaas | 271 comments
Let's Encrypt blog post announcing general availability of short-lived six-day (160-hour) certificates and IP address certificates via the ACME 'shortlived' profile.
769 points by SGran | 318 comments
Let's Encrypt blog post by Josh Aas reflecting on ten years of issuing free, automated TLS certificates and its growth to the largest certificate authority.
742 points by phickey | 269 comments
NGINX Community Blog post announcing native support for the ACME protocol for automated TLS certificate issuance and renewal.
380 points by mcbain | 384 comments
Blog post by Rachel by the Bay explaining why she dropped her traditional paid TLS certificate and moved to ACME-issued certs, after long distrust of the protocol and clients.
485 points by crtasm | 586 comments
DigiCert blog post announcing that the CA/Browser Forum voted to reduce maximum TLS certificate lifetimes to 47 days.
1545 points by notmine1337 | 346 comments
watchTowr Labs blog post describing how registering an expired WHOIS server domain for $20 let them take over .mobi WHOIS and reach RCE paths.