← CCADB Browser
Export Audit Dump
CA Owner · United States of America
Internet Security Research Group
Identity
- CountryCCADBA text value provided by the CA Owner representing the physical address of their organization.
- 🇺🇸 United States of America
Documentation
- Policy DocsCCADBNotes about the documentation, such as which language the documents are in, or additional documents that need to be listed, as configured by the CA Owner.
- —
- Doc RepositoryCCADBThe URL to the document repository pertaining to this certificate, as configured by the CA Owner.
Problem ReportingCCADBCCADB-published contact mechanisms for certificate problem reports and CA incident reports.
CCADB-published contact mechanisms for certificate problem reports and CA incident reports.
Internet Security Research Group
Mozilla CA Program — Known Bugzilla Cases (48)
Let's Encrypt: CRLs Temporarily Missing Revoked Serials
AI Summary
Let's Encrypt: Gen Y Cross-Certified Subordinate CAs missing serverAuth EKU
AI Summary
Let's Encrypt: Deployed Unreviewed Boulder Code
AI Summary
Let's Encrypt: Issuance for Invalid Internationalized Domain Name
AI Summary
Let's Encrypt: Failure to Document Analysis of Detected Vulnerabilities
AI Summary
Let's Encrypt: Early CRL Removal Incident
AI Summary
Let's Encrypt: No Meaningful Subject Distinguished Name
AI Summary
Let's Encrypt: keyCompromise key blocking deviation from CP/CPS
AI Summary
Let's Encrypt Draft WebTrust Audit Documents
AI Summary
Once Revoked Let's Encrypt Certificate Actively Signing Malware
AI Summary
Let's Encrypt: Duplicate Serial Numbers
AI Summary
Let's Encrypt 2022 WebTrust Audit Documents
AI Summary
Let's Encrypt: End Entity CRLs Not Reissued On Time
AI Summary
Let's Encrypt: Delayed revocation for removed gTLD
AI Summary
Let's Encrypt: Incomplete and Inconsistent CRLs
AI Summary
Let's Encrypt: Certificates issued to Elliptic Curve Debian Weak Keys
AI Summary
Let's Encrypt: Failure to provide OCSP Responses for some certificates
AI Summary
Let's Encrypt: TLS Using ALPN Allows Additional Identifiers in Challenge Certificate
AI Summary
Let's Encrypt: TLS Using ALPN TLS Version and OID
AI Summary
Let's Encrypt: Potential Denial of Service against websites with broad private key reuse
AI Summary
Let's Encrypt: Mis-issued certificates related to SC48v2
AI Summary
Let's Encrypt: Delay updating OCSP responses
AI Summary
Let's Encrypt: Failure to revoke for Certificate Lifetime Incident
AI Summary
Let's Encrypt: certificate lifetimes 90 days plus one second
AI Summary
ISRG Root X2 inclusion request
AI Summary
Let's Encrypt: Failure to audit log subscriber certificate OCSP updates
AI Summary
Let's Encrypt: 302 total OCSP responses available beyond acceptable timelines
AI Summary
Let's Encrypt: intent to issue root and intermediate certificates with organizationName and CABF DV OID
AI Summary
Let's Encrypt: OCSP responses with no revocationReason
AI Summary
Let's Encrypt: Expired ISRG Root OCSP X1 Certificate
AI Summary
Let's Encrypt: Failure to revoke key-compromised certificate within 24 hours
AI Summary
Let's Encrypt: Failure to revoke key-compromised certificates within 24 hours
AI Summary
Let's Encrypt: Failure to revoke key-compromised certificates within 24 hours
AI Summary
Let's Encrypt: Incomplete revocation for CAA rechecking bug
AI Summary
Let's Encrypt: CAA Rechecking bug
AI Summary
Let's Encrypt: OCSP Responder Returned "Unauthorized" for Some Precertificates
AI Summary
Let's Encrypt: 2019.08.20 Incident: Incorrect OCSP responses under certain conditions
AI Summary
Let's Encrypt: OCSP "unauthorized" responses
AI Summary
Let's Encrypt: Case-sensitive CAA tag processing
AI Summary
Let's Encrypt: Improper encoding of wildcard certificates
AI Summary
Audit documents for ISRG / Let's Encrypt
AI Summary
Let's Encrypt: Attacker-controlled google.tg certificate being used in the wild.
AI Summary
Let's Encrypt: CAA Misissuances
AI Summary
Let's Encrypt: Non-BR-Compliant Certificate Issuance
AI Summary
ISRG / Let's Encrypt WebTrust audits
AI Summary
Let's Encrypt: certs issued contrary to CPS due to incomplete blocklist
AI Summary
Distrust ISRG Subordinate Certificate and Remove It Until the CA is Compliant with Mozilla Policies
AI Summary
Add ISRG / Let's Encrypt root certificate
AI Summary
Certificates (40)
| Certificate | Type | Trust | Source agreement | Capabilities | Valid Until | Actions |
|---|---|---|---|---|---|---|
| Root | ✓ | 2035-06-04 | ||||
| Intermediate | i | 2027-03-12 | ||||
| Intermediate | i | 2027-03-12 | ||||
| Intermediate | i | 2027-03-12 | ||||
| Intermediate | i | 2027-03-12 | ||||
| Intermediate | i | 2027-03-12 | ||||
|
ISRG Root X2
Expired |
Intermediate | — | 2025-09-15 | |||
| Intermediate | i | 2032-09-02 | ||||
|
ISRG Root X2
Revoked |
Intermediate | — | 2032-09-02 | |||
|
Let's Encrypt Authority X1
Expired |
Intermediate | — | 2020-06-04 | |||
|
Let's Encrypt Authority X2
Expired |
Intermediate | — | 2020-06-04 | |||
|
Let's Encrypt Authority X3
Expired |
Intermediate | — | 2021-10-06 | |||
|
Let's Encrypt Authority X4
Expired |
Intermediate | — | 2021-10-06 | |||
| Intermediate | i | 2027-03-12 | ||||
| Intermediate | i | 2027-03-12 | ||||
| Intermediate | i | 2027-03-12 | ||||
| Intermediate | i | 2027-03-12 | ||||
| Intermediate | i | 2027-03-12 | ||||
|
R3
Expired |
Intermediate | — | 2025-09-15 | |||
|
R4
Expired |
Intermediate | — | 2025-09-15 | |||
|
Root YR
Revoked |
Intermediate | — | 2032-09-02 | |||
| Intermediate | i | 2032-09-02 | ||||
| Root | ✓ | 2040-09-17 | ||||
|
E1
Expired |
Intermediate | — | 2025-09-15 | |||
|
E2
Expired |
Intermediate | — | 2025-09-15 | |||
| Intermediate | i | 2027-03-12 | ||||
| Intermediate | i | 2027-03-12 | ||||
| Intermediate | i | 2027-03-12 | ||||
| Intermediate | i | 2027-03-12 | ||||
| Intermediate | i | 2027-03-12 | ||||
| Intermediate | i | 2032-09-02 | ||||
|
Root YE
Revoked |
Intermediate | — | 2032-09-02 | |||
| Root | — | 2045-09-02 | ||||
| Intermediate | i | — | 2028-09-02 | |||
| Intermediate | i | — | 2028-09-02 | |||
| Intermediate | i | — | 2028-09-02 | |||
| Root | — | 2045-09-02 | ||||
| Intermediate | i | — | 2028-09-02 | |||
| Intermediate | i | — | 2028-09-02 | |||
| Intermediate | i | — | 2028-09-02 |