This is a pretty pedantic point and the inaccuracy doesn't detract from the rest of the post, though I will mention this to the author as accuracy is important.

This is a pretty pedantic point and the inaccuracy doesn't detract from the rest of the post, though I will mention this to the author as accuracy is important. The accurate thing to say is that the attack was found 6 weeks before Let's Encrypt's keys were scheduled to be trusted by browsers (by way of IdenTrust's cross certificate). (Per https://letsencrypt.org/2015/06/16/lets-encrypt-launch-schedule.html https://letsencrypt.org/2015/06/16/lets-encrypt-launch-sched...)