3 ms·

And some already trusted CA to cross-sign your certificate...

• cpach 7y ago
  That is not strictly required though. LE did this in order to speed up the rollout but you can also skip that step and submit the root CA to the appropriate places, e.g. Mozillaʼs CA Certificate Program.
  • darkwater 7y ago
    And then you lose all the older browser installations... There was a reason if LE went the way they went and basically it is retro-compatibility. Anyway I'm not arguing that it would be impossible to create an LE2 but it would not be that simple. Especially if the buyer is someone already in the certificates business that wants to destroy the "free-for-all" concept.
    • GuyPostington 7y ago
      To help produce an LE2, please contribute to https://github.com/tdelmas/Let-s-Clone https://github.com/tdelmas/Let-s-Clone