Hacker News with Generative AI: Let's Encrypt

Ending TLS Client Authentication Certificate Support in 2026 (letsencrypt.org)
Let’s Encrypt will no longer include the “TLS Client Authentication” Extended Key Usage (EKU) in our certificates beginning in 2026. Most users who use Let’s Encrypt to secure websites won’t be affected and won’t need to take any action. However, if you use Let’s Encrypt certificates as client certificates to authenticate to a server, this change may impact you.
We Issued Our First Six Day Cert (letsencrypt.org)
Earlier this year we announced our intention to introduce short-lived certificates with lifetimes of six days as an option for our subscribers. Yesterday we issued our first short-lived certificate.
We Issued Our First Six Day Cert (letsencrypt.org)
Earlier this year we announced our intention to introduce short-lived certificates with lifetimes of six days as an option for our subscribers. Yesterday we issued our first short-lived certificate.
Certificate Profile Selection (Let's Encrypt) (letsencrypt.org)
We are excited to announce a new extension to Let’s Encrypt’s implementation of the ACME protocol that we are calling “profile selection.” This new feature will allow site operators and ACME clients to opt in to the next evolution of Let’s Encrypt.
We have an unusual concern when we use Let's Encrypt (utoronto.ca)
One of the bits of recent TLS news is that Let's Encrypt is going to start offering 6-day TLS certificates.
Short-Lived Certificates Coming to Let's Encrypt (schneier.com)
Let's Encrypt was unable to validate domain names (status.io)
All Systems Operational
We ensure Cloudflare customers aren't affected by LE's certificate chain change (cloudflare.com)