Extending Android Device Compatibility for Let's Encrypt Certificates

Extending Android Device Compatibility for Let's Encrypt Certificates Update, May 13, 2021 Please visit this post on our community forum for the latest information about chain changes as some information about the changes and dates in this blog post are outdated. We’re happy to announce that we have developed a way for older Android devices to retain their ability to visit sites that use Let’s Enc

[yosuke_furukawa]

“IdenTrust has agreed to issue a 3-year cross-sign for our ISRG Root X1 from their DST Root CA X3.” 3年は延長してくれたってことか。 Let's Encrypt でも Android の古い端末で3年だけもちそう。

[causeless]

"@rung 古いAndroidでのLet’s encrypt延命、いいはなし。さらっと読む感じ、今まで使ってた”Identrust DST Root CA X3”(来年9月期限)でクロスルートにすることで解決。Androidがルート証明…" from https://twitter.com/i/web/status/1341184406237548545

[Songmu]

ISRG(Let's Encrypt)のRoot証明書をさらにDST(IdenTrust)のRoot証明書でクロス署名するというウルトラC。

[riawiththesam]

DST Root CA X3の件はクロスサインにすることで回避するっぽい？

[avalon1982]

回避

[yujiorama]

"that use Let’s Encrypt certificates after our cross-signed intermediates expire."