3 ms·
Do Chrome and Mozilla have Let's Encrypt in their Root stores? I don't see them.
by worklogin 11y ago
Do Chrome and Mozilla have Let's Encrypt in their Root stores? I don't see them.
- echeese 11y agoThey're cross-signed by DST Root CA X3 which is in the list.
- vtlynch 11y agoNo. The Let's Encrypt root was recently created and will be submitted to root inclusion programs. It will probably be quite a while until its suitable to issue certs solely from the Let's Encrypt Root. For now, the certs are cross signed by "DST Root CA X3" operated by Identrust. This root has very strong inclusion. For specifics, please see: https://groups.google.com/a/letsencrypt.org/forum/#!msg/client-dev/I-iFKihZ4Vo/5g9Xb5SroOsJ https://groups.google.com/a/letsencrypt.org/forum/#!msg/clie...
- worklogin 11y agoDangit, I didn't read the second paragraph. For GA, they will have the cross-sign. It's just for the EA that they don't.