4 ms·
I was going to ask about browser trust but their FAQ (https://community.letsencrypt.org/t/frequently-asked-questions-faq/26 https://community.letsencrypt.org/t/
by tedmiston 11y ago
I was going to ask about browser trust but their FAQ (https://community.letsencrypt.org/t/frequently-asked-questions-faq/26 https://community.letsencrypt.org/t/frequently-asked-questio...) addressed it. If others are curious:
> Are certificates from Let’s Encrypt trusted by my browser?
The short answer is “yes”.
The long answer is that our issuing intermediates are cross-signed by a widely trusted IdenTrust root531. This allows our certificates to be trusted while we work on propagating our own root. Most platforms that trust that root should trust Let's Encrypt certs. One notable exception is Windows XP, which currently doesn't accept our intermediate630.
- frik 11y agoAbout WinXP: Sadly at the moment not only IE, but also e.g. Chrome on WinXP: https://github.com/letsencrypt/letsencrypt/issues/1660 https://github.com/letsencrypt/letsencrypt/issues/1660 and https://github.com/letsencrypt/letsencrypt/issues/1942 https://github.com/letsencrypt/letsencrypt/issues/1942
- TazeTSchnitzel 11y agoChrome and IE both use Windows's certificate store. But XP is silly anyway, it doesn't even have SNI.
- cm2187 11y agoChrome on XP has SNI