Precertificates are optional. Alternatively, the CA can skip creating a precertificate. The certificate would not contain any embedded SCTs. Instead, the cer

Precertificates are optional. Alternatively, the CA can skip creating a precertificate. The certificate would not contain any embedded SCTs. Instead, the certificate is logged using the add-chain endpoint[1], and the returned SCTs are delivered via an extension to the TLS handshake or an extension in a stapled OCSP response[2] [1] https://datatracker.ietf.org/doc/html/rfc6962#section-4.1 https://datatracker.ietf.org/doc/html/rfc6962#section-4.1 [2] https://datatracker.ietf.org/doc/html/rfc6962#section-3.3 https://datatracker.ietf.org/doc/html/rfc6962#section-3.3