diff --git a/content/cs/certificates.md b/content/cs/certificates.md
index a32d67c46..d695cf1b7 100644
--- a/content/cs/certificates.md
+++ b/content/cs/certificates.md
@@ -24,7 +24,7 @@ Upozorňujeme, že kořenové CA nemají datum platnosti ve stejném smyslu jako
   * Podrobnosti certifikátu (podepsaný sám sebou): [crt.sh](https://crt.sh/?id=9314791), [der](/certs/isrgrootx1.der), [pem](/certs/isrgrootx1.pem), [txt](/certs/isrgrootx1.txt)
   * Podrobnosti certifikátu (křížově podepsaný DST Root CA X3): [crt.sh](https://crt.sh/?id=3958242236), [der](/certs/isrg-root-x1-cross-signed.der), [pem](/certs/isrg-root-x1-cross-signed.pem), [txt](/certs/isrg-root-x1-cross-signed.txt) (ukončeno)
   * CRL hostname: `x1.c.lencr.org`
-  * Testovací webstránky: [platný](https://valid-isrgrootx1.letsencrypt.org/), [odvolaný](https://revoked-isrgrootx1.letsencrypt.org/), [expirovaný](https://expired-isrgrootx1.letsencrypt.org/)
+  * Testovací webstránky: [platný](https://valid.x1.test-certs.letsencrypt.org/), [odvolaný](https://revoked.x1.test-certs.letsencrypt.org/), [expirovaný](https://expired.x1.test-certs.letsencrypt.org/)
 * **ISRG Root X2**
   * Předmět: `O = Internet Security Research Group, CN = ISRG Root X2`
   * Typ klíče: `ECDSA P-384`
@@ -34,7 +34,7 @@ Upozorňujeme, že kořenové CA nemají datum platnosti ve stejném smyslu jako
   * Podrobnosti certifikátu (křížově podepsaný ISRG Root X1): [crt.sh](https://crt.sh/?id=3334561878), [der](/certs/isrg-root-x2-cross-signed.der), [pem](/certs/isrg-root-x2-cross-signed.pem), [txt](/certs/isrg-root-x2-cross-signed.txt)
   * Podrobnosti certifikátu (křížově podepsaný ISRG Root X1): [crt.sh](https://crt.sh/?id=20878422868), [der](/certs/gen-y/root-x2-by-x1.der), [pem](/certs/gen-y/root-x2-by-x1.pem), [txt](/certs/gen-y/root-x2-by-x1.txt)
   * CRL hostname: `x2.c.lencr.org`
-  * Testovací webstránky: [platný](https://valid-isrgrootx2.letsencrypt.org/), [odvolaný](https://revoked-isrgrootx2.letsencrypt.org/), [expirovaný](https://expired-isrgrootx2.letsencrypt.org/)
+  * Testovací webstránky: [platný](https://valid.x2.test-certs.letsencrypt.org/), [odvolaný](https://revoked.x2.test-certs.letsencrypt.org/), [expirovaný](https://expired.x2.test-certs.letsencrypt.org/)
 
 Tyto kořeny zatím nejsou zahrnuty v úložištích důvěryhodných kořenových programů (Trust Stores), ale brzy budou předloženy k zařazení:
 
diff --git a/content/da/certificates.md b/content/da/certificates.md
index c6f334f8b..3c0cb0667 100644
--- a/content/da/certificates.md
+++ b/content/da/certificates.md
@@ -24,7 +24,7 @@ Bemærk, at Root CAs ikke har udløbsdatoer på helt samme måde som andre certi
   * Certifikatoplysninger (selvsigneret): [crt.sh](https://crt.sh/?id=9314791), [der](/certs/isrgrootx1.der), [pem](/certs/isrgrootx1.pem), [txt](/certs/isrgrootx1.txt)
   * Certifikatdetaljer (krydssigneret af DST Root CA X3): [crt.sh](https://crt.sh/?id=3958242236), [der](/certs/isrg-root-x1-cross-signed.der), [pem](/certs/isrg-root-x1-cross-signed.pem), [txt](/certs/isrg-root-x1-cross-signed.txt) (pensioneret)
   * CRL værtsnavn: `x1.c.lencr.org`
-  * Test websteder: [gyldigt](https://valid-isrgrootx1.letsencrypt.org/), [tilbagekaldt](https://revoked-isrgrootx1.letsencrypt.org/), [udløbet](https://expired-isrgrootx1.letsencrypt.org/)
+  * Test websteder: [gyldigt](https://valid.x1.test-certs.letsencrypt.org/), [tilbagekaldt](https://revoked.x1.test-certs.letsencrypt.org/), [udløbet](https://expired.x1.test-certs.letsencrypt.org/)
 * **ISRG Root X2**
   * Emne: `O = Research Group, Internet Security Group, CN = ISRG Root X2`
   * Nøgletype: `ECDSA P-384`
@@ -34,7 +34,7 @@ Bemærk, at Root CAs ikke har udløbsdatoer på helt samme måde som andre certi
   * Certifikatoplysninger (krydsunderskrevet af ISRG Root X1): [crt.sh](https://crt.sh/?id=3334561878), [der](/certs/isrg-root-x2-cross-signed.der), [pem](/certs/isrg-root-x2-cross-signed.pem), [txt](/certs/isrg-root-x2-cross-signed.txt)
   * Certifikat detaljer (andet kryds underskrevne af ISRG Root X1): [crt.sh](https://crt.sh/?id=20878422868), [der](/certs/gen-y/root-x2-by-x1.der),[pem](/certs/gen-y/root-x2-by-x1.pem),[txt](/certs/gen-y/root-x2-by-x1.txt)
   * CRL værtsnavn: `x2.c.lencr.org`
-  * Test websteder: [gyldigt](https://valid-isrgrootx2.letsencrypt.org/), [tilbagekaldt](https://revoked-isrgrootx2.letsencrypt.org/), [udløbet](https://expired-isrgrootx2.letsencrypt.org/)
+  * Test websteder: [gyldigt](https://valid.x2.test-certs.letsencrypt.org/), [tilbagekaldt](https://revoked.x2.test-certs.letsencrypt.org/), [udløbet](https://expired.x2.test-certs.letsencrypt.org/)
 
 Disse root certifikater er endnu ikke inkluderet i Root Program Trust Stores, men vil snart blive indsendt:
 
diff --git a/content/de/certificates.md b/content/de/certificates.md
index 868372134..8f0c01463 100644
--- a/content/de/certificates.md
+++ b/content/de/certificates.md
@@ -24,7 +24,7 @@ Beachten Sie, dass Root CAs keine Verfallsdaten haben, so wie andere Zertifikate
   * Zertifikatsdetails (selbstsigniert): [crt.sh](https://crt.sh/?id=9314791), [der](/certs/isrgrootx1.der), [pem](/certs/isrgrootx1.pem), [txt](/certs/isrgrootx1.txt)
   * Zertifikatsdetails (Crosssigniert von DST Root CA X3): [crt.sh](https://crt.sh/?id=3958242236), [der](/certs/isrg-root-x1-cross-signed.der), [pem](/certs/isrg-root-x1-cross-signed.pem), [txt](/certs/isrg-root-x1-cross-signed.txt) (außer Dienst)
   * CRL Hostname: `x1.c.lencr.org`
-  * Webseiten testen: [gültig](https://valid-isrgrootx1.letsencrypt.org/), [widerrufen](https://revoked-isrgrootx1.letsencrypt.org/), [abgelaufen](https://expired-isrgrootx1.letsencrypt.org/)
+  * Webseiten testen: [gültig](https://valid.x1.test-certs.letsencrypt.org/), [widerrufen](https://revoked.x1.test-certs.letsencrypt.org/), [abgelaufen](https://expired.x1.test-certs.letsencrypt.org/)
 * **ISRG Root X2**
   * Betreff: `O = Internet Security Research Group, CN = ISRG Root X2`
   * Schlüsseltyp: `ECDSA P-384`
@@ -34,7 +34,7 @@ Beachten Sie, dass Root CAs keine Verfallsdaten haben, so wie andere Zertifikate
   * Zertifikatsdetails (Quersigniert von ISRG Root X1): [crt.sh](https://crt.sh/?id=3334561878), [der](/certs/isrg-root-x2-cross-signed.der), [pem](/certs/isrg-root-x2-cross-signed.pem), [txt](/certs/isrg-root-x2-cross-signed.txt)
   * Zertifikatsdetails (zweites quersigniertes von ISRG Root X1): [crt.sh](https://crt.sh/?id=20878422868), [der](/certs/gen-y/root-x2-by-x1.der), [pem](/certs/gen-y/root-x2-by-x1.pem), [txt](/certs/gen-y/root-x2-by-x1.txt)
   * CRL Hostname: `x2.c.lencr.org`
-  * Webseiten testen: [gültig](https://valid-isrgrootx2.letsencrypt.org/), [widerrufen](https://revoked-isrgrootx2.letsencrypt.org/), [abgelaufen](https://expired-isrgrootx2.letsencrypt.org/)
+  * Webseiten testen: [gültig](https://valid.x2.test-certs.letsencrypt.org/), [widerrufen](https://revoked.x2.test-certs.letsencrypt.org/), [abgelaufen](https://expired.x2.test-certs.letsencrypt.org/)
 
 Diese Root CAs sind noch nicht in Root Programme und Trust Stores enthalten, werden aber bald zur Aufnahme eingereicht:
 
diff --git a/content/el/certificates.md b/content/el/certificates.md
index bf049be66..39b592f78 100644
--- a/content/el/certificates.md
+++ b/content/el/certificates.md
@@ -25,13 +25,13 @@ show_lastmod: 1
 Έχουμε δημιουργήσει ιστότοπους για να δοκιμάσουμε τα πιστοποιητικά αλυσοπρίονο στις ενεργές ρίζες μας.
 
 * ISRG Root X1
-  * [Έγκυρο](https://valid-isrgrootx1.letsencrypt.org/)
-  * [Ανάκληση](https://revoked-isrgrootx1.letsencrypt.org/)
-  * [Ληγμένο](https://expired-isrgrootx1.letsencrypt.org/)
+  * [Έγκυρο](https://valid.x1.test-certs.letsencrypt.org/)
+  * [Ανάκληση](https://revoked.x1.test-certs.letsencrypt.org/)
+  * [Ληγμένο](https://expired.x1.test-certs.letsencrypt.org/)
 * ISRG Root X1
-  * [Έγκυρο](https://valid-isrgrootx2.letsencrypt.org/)
-  * [Ανάκληση](https://revoked-isrgrootx2.letsencrypt.org/)
-  * [Ληγμένο](https://expired-isrgrootx2.letsencrypt.org/)
+  * [Έγκυρο](https://valid.x2.test-certs.letsencrypt.org/)
+  * [Ανάκληση](https://revoked.x2.test-certs.letsencrypt.org/)
+  * [Ληγμένο](https://expired.x2.test-certs.letsencrypt.org/)
 
 # Ενδιάμεσα Πιστοποιητικά
 
diff --git a/content/en/certificates.md b/content/en/certificates.md
index 810cec8d0..05f32ff7b 100644
--- a/content/en/certificates.md
+++ b/content/en/certificates.md
@@ -2,7 +2,7 @@
 title: Chains of Trust
 linkTitle: Chains of Trust (Root and Intermediate Certificates)
 slug: certificates
-lastmod: 2026-01-08
+lastmod: 2026-03-27
 show_lastmod: 1
 ---
 
@@ -24,7 +24,7 @@ Note that Root CAs don't have expiration dates in quite the same way that other
   * Certificate details (self-signed): [crt.sh](https://crt.sh/?id=9314791), [der](/certs/isrgrootx1.der), [pem](/certs/isrgrootx1.pem), [txt](/certs/isrgrootx1.txt)
   * Certificate details (cross-signed by DST Root CA X3): [crt.sh](https://crt.sh/?id=3958242236), [der](/certs/isrg-root-x1-cross-signed.der), [pem](/certs/isrg-root-x1-cross-signed.pem), [txt](/certs/isrg-root-x1-cross-signed.txt) (retired)
   * CRL hostname: `x1.c.lencr.org`
-  * Test websites: [valid](https://valid-isrgrootx1.letsencrypt.org/), [revoked](https://revoked-isrgrootx1.letsencrypt.org/), [expired](https://expired-isrgrootx1.letsencrypt.org/)
+  * Test websites: [valid](https://valid.x1.test-certs.letsencrypt.org/), [revoked](https://revoked.x1.test-certs.letsencrypt.org/), [expired](https://expired.x1.test-certs.letsencrypt.org/)
 * **ISRG Root X2**
   * Subject: `O = Internet Security Research Group, CN = ISRG Root X2`
   * Key type: `ECDSA P-384`
@@ -34,7 +34,7 @@ Note that Root CAs don't have expiration dates in quite the same way that other
   * Certificate details (cross-signed by ISRG Root X1): [crt.sh](https://crt.sh/?id=3334561878), [der](/certs/isrg-root-x2-cross-signed.der), [pem](/certs/isrg-root-x2-cross-signed.pem), [txt](/certs/isrg-root-x2-cross-signed.txt)
   * Certificate details (second cross-sign by ISRG Root X1): [crt.sh](https://crt.sh/?id=20878422868), [der](/certs/gen-y/root-x2-by-x1.der), [pem](/certs/gen-y/root-x2-by-x1.pem), [txt](/certs/gen-y/root-x2-by-x1.txt)
   * CRL hostname: `x2.c.lencr.org`
-  * Test websites: [valid](https://valid-isrgrootx2.letsencrypt.org/), [revoked](https://revoked-isrgrootx2.letsencrypt.org/), [expired](https://expired-isrgrootx2.letsencrypt.org/)
+  * Test websites: [valid](https://valid.x2.test-certs.letsencrypt.org/), [revoked](https://revoked.x2.test-certs.letsencrypt.org/), [expired](https://expired.x2.test-certs.letsencrypt.org/)
 
 These roots are not yet included in Root Program Trust Stores, but will be submitted for inclusion soon:
 
@@ -46,7 +46,7 @@ These roots are not yet included in Root Program Trust Stores, but will be submi
   * Certificate details (self-signed): [der](/certs/gen-y/root-ye.der), [pem](/certs/gen-y/root-ye.pem), [txt](/certs/gen-y/root-ye.txt)
   * Certificate details (cross-signed by ISRG Root X2): [der](/certs/gen-y/root-ye-by-x2.der), [pem](/certs/gen-y/root-ye-by-x2.pem), [txt](/certs/gen-y/root-ye-by-x2.txt)
   * CRL hostname: `ye.c.lencr.org`
-  * Test websites: Forthcoming
+  * Test websites: [valid](https://valid.ye.test-certs.letsencrypt.org/), [revoked](https://revoked.ye.test-certs.letsencrypt.org/), [expired](https://expired.ye.test-certs.letsencrypt.org/)
 * **ISRG Root YR**
   * Subject: `O = ISRG, CN = Root YR`
   * Key type: `RSA 4096`
@@ -55,7 +55,7 @@ These roots are not yet included in Root Program Trust Stores, but will be submi
   * Certificate details (self-signed): [der](/certs/gen-y/root-yr.der), [pem](/certs/gen-y/root-yr.pem), [txt](/certs/gen-y/root-yr.txt)
   * Certificate details (cross-signed by ISRG Root X1): [der](/certs/gen-y/root-yr-by-x1.der), [pem](/certs/gen-y/root-yr-by-x1.pem), [txt](/certs/gen-y/root-yr-by-x1.txt)
   * CRL hostname: `yr.c.lencr.org`
-  * Test websites: Forthcoming
+  * Test websites: [valid](https://valid.yr.test-certs.letsencrypt.org/), [revoked](https://revoked.yr.test-certs.letsencrypt.org/), [expired](https://expired.yr.test-certs.letsencrypt.org/)
 
 For additional information on the compatibility of our root certificates with various devices and trust stores, see [Certificate Compatibility](/docs/cert-compat).
 
diff --git a/content/en/post/2019-4-15-transitioning-to-isrg-root.md b/content/en/post/2019-4-15-transitioning-to-isrg-root.md
index 61fbe4ff6..f37f0a768 100644
--- a/content/en/post/2019-4-15-transitioning-to-isrg-root.md
+++ b/content/en/post/2019-4-15-transitioning-to-isrg-root.md
@@ -20,7 +20,7 @@ Since Let’s Encrypt launched, our certificates have been trusted by browsers v
 
 Now that our own root, [ISRG Root X1](https://letsencrypt.org/certificates/), is [widely trusted by browsers](https://letsencrypt.org/2018/08/06/trusted-by-all-major-root-programs.html) we’d like to transition our subscribers to using our root directly, without a cross-sign.
 
-On **January 11, 2021**, Let’s Encrypt will start serving a certificate chain via the ACME protocol which leads directly to our root, with no cross-signature. Most subscribers don’t need to take any action because their ACME client will handle everything automatically. Subscribers who need to support very old TLS/SSL clients may wish to manually configure their servers to continue using the cross-signature from IdenTrust. You can test whether a given client will work with the newer intermediate by accessing our [test site](https://valid-isrgrootx1.letsencrypt.org/).
+On **January 11, 2021**, Let’s Encrypt will start serving a certificate chain via the ACME protocol which leads directly to our root, with no cross-signature. Most subscribers don’t need to take any action because their ACME client will handle everything automatically. Subscribers who need to support very old TLS/SSL clients may wish to manually configure their servers to continue using the cross-signature from IdenTrust. You can test whether a given client will work with the newer intermediate by accessing our [test site](https://valid.x1.test-certs.letsencrypt.org/).
 
 Our current cross-signature from IdenTrust expires on March 17, 2021. The IdenTrust root that we are cross-signed from expires on September 30, 2021. Within the next year we will obtain a new cross-signature that is valid until September 29, 2021. This means that our subscribers will have the option to manually configure a certificate chain that uses IdenTrust until **September 29, 2021**.
 
diff --git a/content/es/certificates.md b/content/es/certificates.md
index 6dbb6bf2f..8a9321f44 100644
--- a/content/es/certificates.md
+++ b/content/es/certificates.md
@@ -17,11 +17,11 @@ Nuestras raíces son seguramente mantenidas "offline". Emitimos certificados de
 Hemos configurado sitios web para probar certificados encadenados a nuestras raíces.
 
 * Certificado Válido ISRG Root X1
-  * [https://valid-isrgrootx1.letsencrypt.org/](https://valid-isrgrootx1.letsencrypt.org/)
+  * [https://valid.x1.test-certs.letsencrypt.org/](https://valid.x1.test-certs.letsencrypt.org/)
 * Certificado Revocado ISRG Root X1
-  * [https://revoked-isrgrootx1.letsencrypt.org/](https://revoked-isrgrootx1.letsencrypt.org/)
+  * [https://revoked.x1.test-certs.letsencrypt.org/](https://revoked.x1.test-certs.letsencrypt.org/)
 * Certificado Expirado ISRG Root X1 
-  * [https://expired-isrgrootx1.letsencrypt.org/](https://expired-isrgrootx1.letsencrypt.org/)
+  * [https://expired.x1.test-certs.letsencrypt.org/](https://expired.x1.test-certs.letsencrypt.org/)
 
 # Certificados Intermedios
 
diff --git a/content/fi/certificates.md b/content/fi/certificates.md
index 440375e2a..878736234 100644
--- a/content/fi/certificates.md
+++ b/content/fi/certificates.md
@@ -25,13 +25,13 @@ Meidän juuret pidetään turvallisesti pois verkosta. Myönnämme loppukäyttä
 Olemme asettaneet verkkosivustot testaamaan varmenteiden ketjutusta aktiivisiin juurimme saakka.
 
 * ISRG Root X1
-  * [Kelvollinen](https://valid-isrgrootx1.letsencrypt.org/)
-  * [Kumottu](https://revoked-isrgrootx1.letsencrypt.org/)
-  * [Vanhentunut](https://expired-isrgrootx1.letsencrypt.org/)
+  * [Kelvollinen](https://valid.x1.test-certs.letsencrypt.org/)
+  * [Kumottu](https://revoked.x1.test-certs.letsencrypt.org/)
+  * [Vanhentunut](https://expired.x1.test-certs.letsencrypt.org/)
 * ISRG Root X2
-  * [Kelvollinen](https://valid-isrgrootx2.letsencrypt.org/)
-  * [Kumottu](https://revoked-isrgrootx2.letsencrypt.org/)
-  * [Vanhentunut](https://expired-isrgrootx2.letsencrypt.org/)
+  * [Kelvollinen](https://valid.x2.test-certs.letsencrypt.org/)
+  * [Kumottu](https://revoked.x2.test-certs.letsencrypt.org/)
+  * [Vanhentunut](https://expired.x2.test-certs.letsencrypt.org/)
 
 # Välilliset varmenteet
 
diff --git a/content/fr/certificates.md b/content/fr/certificates.md
index 104b9dc60..ae054449d 100644
--- a/content/fr/certificates.md
+++ b/content/fr/certificates.md
@@ -23,7 +23,7 @@ Notez que les AC racines n'ont pas de date d'expiration comme les autres certifi
   * Détails de l'AC : [crt.sh](https://crt.sh/?caid=7394), [certificats délivrés](https://crt.sh/?Identity=%25&iCAID=7394)
   * Détails du certificat (auto-signé) : [crt.sh](https://crt.sh/?id=9314791), [der](/certs/isrgrootx1.der), [pem](/certs/isrgrootx1.pem), [txt](/certs/isrgrootx1.txt)
   * Détails du certificat (signé par l'AC racine DST X3) : [crt.sh](https://crt.sh/?id=3958242236), [der](/certs/isrg-root-x1-cross-signed.der), [pem](/certs/isrg-root-x1-cross-signed.pem), [txt](/certs/isrg-root-x1-cross-signed.txt) (retiré)
-  * Test de sites web : [valide](https://valid-isrgrootx1.letsencrypt.org/), [révoqué](https://revoked-isrgrootx1.letsencrypt.org/), [expiré](https://expired-isrgrootx1.letsencrypt.org/)
+  * Test de sites web : [valide](https://valid.x1.test-certs.letsencrypt.org/), [révoqué](https://revoked.x1.test-certs.letsencrypt.org/), [expiré](https://expired.x1.test-certs.letsencrypt.org/)
 * **Racine ISRG X2**
   * Objet : `O = Internet Security Research Group, CN = ISRG Root X2`
   * Type de clé : `ECDSA P-384`
@@ -31,7 +31,7 @@ Notez que les AC racines n'ont pas de date d'expiration comme les autres certifi
   * Détails de l'AC : [crt.sh](https://crt.sh/?caid=183269), [certificats délivrés](https://crt.sh/?Identity=%25&iCAID=183269)
   * Détails du certificat (auto-signé) : [crt.sh](https://crt.sh/?id=3335562555), [der](/certs/isrg-root-x2.der), [pem](/certs/isrg-root-x2.pem), [txt](/certs/isrg-root-x2.txt)
   * Détails du certificat (signé par l'AC racine ISRG X1) : [crt.sh](https://crt.sh/?id=3334561878), [der](/certs/isrg-root-x2-cross-signed.der), [pem](/certs/isrg-root-x2-cross-signed.pem), [txt](/certs/isrg-root-x2-cross-signed.txt)
-  * Test de sites web : [valide](https://valid-isrgrootx2.letsencrypt.org/), [révoqué](https://revoked-isrgrootx2.letsencrypt.org/), [expiré](https://expired-isrgrootx2.letsencrypt.org/)
+  * Test de sites web : [valide](https://valid.x2.test-certs.letsencrypt.org/), [révoqué](https://revoked.x2.test-certs.letsencrypt.org/), [expiré](https://expired.x2.test-certs.letsencrypt.org/)
 
 Pour de plus amples informations sur la compatibilité de nos certificats racine avec divers appareils et magasins de confiance, voir [Compatibilité des certificats](/docs/cert-compat).
 
diff --git a/content/he/certificates.md b/content/he/certificates.md
index bebfe4b1e..10be1ed73 100644
--- a/content/he/certificates.md
+++ b/content/he/certificates.md
@@ -24,7 +24,7 @@ show_lastmod: 1
   * פרטי אישורים (נחתמו עצמאית): [crt.sh](https://crt.sh/?id=9314791),‏ [der](/certs/isrgrootx1.der),‏ [pem](/certs/isrgrootx1.pem),‏ [txt](/certs/isrgrootx1.txt)
   * פרטי אישור (נחתם בהצלבה מול DST Root CA X3):‏ [crt.sh](https://crt.sh/?id=3958242236),‏ [der](/certs/isrg-root-x1-cross-signed.der),‏ [pem](/certs/isrg-root-x1-cross-signed.pem),‏ [txt](/certs/isrg-root-x1-cross-signed.txt) (פרש לגמלאות)
   * שם מארח לרשימת שלילת אישורים (CRL): `x1.c.lencr.org`
-  * אתרי בדיקה: [תקף](https://valid-isrgrootx1.letsencrypt.org/), [נשלל](https://revoked-isrgrootx1.letsencrypt.org/), [פג תוקף](https://expired-isrgrootx1.letsencrypt.org/)
+  * אתרי בדיקה: [תקף](https://valid.x1.test-certs.letsencrypt.org/), [נשלל](https://revoked.x1.test-certs.letsencrypt.org/), [פג תוקף](https://expired.x1.test-certs.letsencrypt.org/)
 * **ISRG Root X2**
   * נושא: `O = Internet Security Research Group,‏ CN = ISRG Root X2`
   * סוג מפתח: `ECDSA P-384`
@@ -34,7 +34,7 @@ show_lastmod: 1
   * פרטי אישור (חתימה צולבת על ידי ISRG Root X1): [crt.sh](https://crt.sh/?id=3334561878),‏ [der](/certs/isrg-root-x2-cross-signed.der),‏ [pem](/certs/isrg-root-x2-cross-signed.pem),‏ [txt](/certs/isrg-root-x2-cross-signed.txt)
   * פרטי אישור (חתימה צולבת שנייה על ידי ISRG Root X1): [crt.sh](https://crt.sh/?id=20878422868),‏ [der](/certs/gen-y/root-x2-by-x1.der),‏ [pem](/certs/gen-y/root-x2-by-x1.pem),‏ [txt](/certs/gen-y/root-x2-by-x1.txt)
   * שם מארח לרשימת שלילת אישורים (CRL): `x2.c.lencr.org`
-  * אתרי בדיקה: [תקף](https://valid-isrgrootx2.letsencrypt.org/), [נשלל](https://revoked-isrgrootx2.letsencrypt.org/), [פג תוקף](https://expired-isrgrootx2.letsencrypt.org/)
+  * אתרי בדיקה: [תקף](https://valid.x2.test-certs.letsencrypt.org/), [נשלל](https://revoked.x2.test-certs.letsencrypt.org/), [פג תוקף](https://expired.x2.test-certs.letsencrypt.org/)
 
 אישורי העל האלה לא נכללים במאגרי האמון של תוכנית אישורי העל, אך תוגש להוספה בקרוב:
 
diff --git a/content/hu/certificates.md b/content/hu/certificates.md
index bf8bc5d5d..96e24f293 100644
--- a/content/hu/certificates.md
+++ b/content/hu/certificates.md
@@ -25,13 +25,13 @@ Gyökértanúsítvánainkat biztonságos módon offline tároljuk. Végfelhaszn
 Weboldalakat hoztunk létre, hogy teszteljük az aktív root-okhoz láncolt tanúsítványokat.
 
 * ISRG Root X1
-  * [Érvényes](https://valid-isrgrootx1.letsencrypt.org/)
-  * [Visszavont](https://revoked-isrgrootx1.letsencrypt.org/)
-  * [Lejárt](https://expired-isrgrootx1.letsencrypt.org/)
+  * [Érvényes](https://valid.x1.test-certs.letsencrypt.org/)
+  * [Visszavont](https://revoked.x1.test-certs.letsencrypt.org/)
+  * [Lejárt](https://expired.x1.test-certs.letsencrypt.org/)
 * ISRG Root X2
-  * [Érvényes](https://valid-isrgrootx2.letsencrypt.org/)
-  * [Visszavont](https://revoked-isrgrootx2.letsencrypt.org/)
-  * [Lejárt](https://expired-isrgrootx2.letsencrypt.org/)
+  * [Érvényes](https://valid.x2.test-certs.letsencrypt.org/)
+  * [Visszavont](https://revoked.x2.test-certs.letsencrypt.org/)
+  * [Lejárt](https://expired.x2.test-certs.letsencrypt.org/)
 
 # Köztes tanúsítványok
 
diff --git a/content/id/certificates.md b/content/id/certificates.md
index 502ef4c47..1948f3c3f 100644
--- a/content/id/certificates.md
+++ b/content/id/certificates.md
@@ -25,13 +25,13 @@ Sertifikat root kami disimpan dengan aman secara luring. Kami menerbitkan sertif
 Kami telah mempersiapkan website untuk pengujian rantai sertifikat menuju root aktif kami.
 
 * ISRG Root X1
-  * [Valid](https://valid-isrgrootx1.letsencrypt.org/)
-  * [Dicabut](https://revoked-isrgrootx1.letsencrypt.org/)
-  * [Kadaluarsa](https://expired-isrgrootx1.letsencrypt.org/)
+  * [Valid](https://valid.x1.test-certs.letsencrypt.org/)
+  * [Dicabut](https://revoked.x1.test-certs.letsencrypt.org/)
+  * [Kadaluarsa](https://expired.x1.test-certs.letsencrypt.org/)
 * ISRG Root X2
-  * [Valid](https://valid-isrgrootx2.letsencrypt.org/)
-  * [Dicabut](https://revoked-isrgrootx2.letsencrypt.org/)
-  * [Kadaluarsa](https://expired-isrgrootx2.letsencrypt.org/)
+  * [Valid](https://valid.x2.test-certs.letsencrypt.org/)
+  * [Dicabut](https://revoked.x2.test-certs.letsencrypt.org/)
+  * [Kadaluarsa](https://expired.x2.test-certs.letsencrypt.org/)
 
 # Sertifikat Perantara
 
diff --git a/content/ja/certificates.md b/content/ja/certificates.md
index ebd1c1210..ee769d823 100644
--- a/content/ja/certificates.md
+++ b/content/ja/certificates.md
@@ -25,13 +25,13 @@ show_lastmod: 1
 Let's Encrypt のルート証明書とチェーンでつながっている証明書をテストするためのウェブサイトを用意しています。
 
 * ISRG Root X1
-  * [有効](https://valid-isrgrootx1.letsencrypt.org/)
-  * [失効済み](https://revoked-isrgrootx1.letsencrypt.org/)
-  * [期限切れ](https://expired-isrgrootx1.letsencrypt.org/)
+  * [有効](https://valid.x1.test-certs.letsencrypt.org/)
+  * [失効済み](https://revoked.x1.test-certs.letsencrypt.org/)
+  * [期限切れ](https://expired.x1.test-certs.letsencrypt.org/)
 * ISRG Root X2
-  * [有効](https://valid-isrgrootx2.letsencrypt.org/)
-  * [失効済み](https://revoked-isrgrootx2.letsencrypt.org/)
-  * [期限切れ](https://expired-isrgrootx2.letsencrypt.org/)
+  * [有効](https://valid.x2.test-certs.letsencrypt.org/)
+  * [失効済み](https://revoked.x2.test-certs.letsencrypt.org/)
+  * [期限切れ](https://expired.x2.test-certs.letsencrypt.org/)
 
 # 中間証明書
 
diff --git a/content/ko/certificates.md b/content/ko/certificates.md
index 59feacd9e..6be300afe 100644
--- a/content/ko/certificates.md
+++ b/content/ko/certificates.md
@@ -17,11 +17,11 @@ show_lastmod: 1
 저희는 root를 추적하는 인증서를 테스트할 수 있는 웹 사이트를 만들었습니다.
 
 * ISRG Root X1 유효 인증서
-  * [https://valid-isrgrootx1.letsencrypt.org/](https://valid-isrgrootx1.letsencrypt.org/)
+  * [https://valid.x1.test-certs.letsencrypt.org/](https://valid.x1.test-certs.letsencrypt.org/)
 * ISRG Root X1 해지된 인증서
-  * [https://revoked-isrgrootx1.letsencrypt.org/](https://revoked-isrgrootx1.letsencrypt.org/)
+  * [https://revoked.x1.test-certs.letsencrypt.org/](https://revoked.x1.test-certs.letsencrypt.org/)
 * ISRG Root X1 만료된 인증서
-  * [https://expired-isrgrootx1.letsencrypt.org/](https://expired-isrgrootx1.letsencrypt.org/)
+  * [https://expired.x1.test-certs.letsencrypt.org/](https://expired.x1.test-certs.letsencrypt.org/)
 
 # 중간 인증서
 
diff --git a/content/ru/certificates.md b/content/ru/certificates.md
index 886be44b2..fcaff0cd3 100644
--- a/content/ru/certificates.md
+++ b/content/ru/certificates.md
@@ -25,13 +25,13 @@ show_lastmod: 1
 Мы создали сайты для проверки цепочки сертификатов вплоть до активных корневых.
 
 * ISRG Root X1
-  * [Действительный](https://valid-isrgrootx1.letsencrypt.org/)
-  * [Отозванный](https://revoked-isrgrootx1.letsencrypt.org/)
-  * [Срок действия истёк](https://expired-isrgrootx1.letsencrypt.org/)
+  * [Действительный](https://valid.x1.test-certs.letsencrypt.org/)
+  * [Отозванный](https://revoked.x1.test-certs.letsencrypt.org/)
+  * [Срок действия истёк](https://expired.x1.test-certs.letsencrypt.org/)
 * ISRG Root X2
-  * [Действительный](https://valid-isrgrootx2.letsencrypt.org/)
-  * [Отозванный](https://revoked-isrgrootx2.letsencrypt.org/)
-  * [Срок действия истёк](https://expired-isrgrootx2.letsencrypt.org/)
+  * [Действительный](https://valid.x2.test-certs.letsencrypt.org/)
+  * [Отозванный](https://revoked.x2.test-certs.letsencrypt.org/)
+  * [Срок действия истёк](https://expired.x2.test-certs.letsencrypt.org/)
 
 # Промежуточные сертификаты
 
diff --git a/content/sr/certificates.md b/content/sr/certificates.md
index 96e64b1e2..4e8e95d23 100644
--- a/content/sr/certificates.md
+++ b/content/sr/certificates.md
@@ -16,11 +16,11 @@ Naši root sertifikati se čuvaju na sigurnom "offline" mestu. Mi izdajemo serti
 Postavili smo web sajtove za testiranje sertifikata koji se vezuju za naše root sertifikate.
 
 * ISRG Root X1 Valid Certificate
-  * [https://valid-isrgrootx1.letsencrypt.org/](https://valid-isrgrootx1.letsencrypt.org/)
+  * [https://valid.x1.test-certs.letsencrypt.org/](https://valid.x1.test-certs.letsencrypt.org/)
 * ISRG Root X1 Revoked Certificate
-  * [https://revoked-isrgrootx1.letsencrypt.org/](https://revoked-isrgrootx1.letsencrypt.org/)
+  * [https://revoked.x1.test-certs.letsencrypt.org/](https://revoked.x1.test-certs.letsencrypt.org/)
 * ISRG Root X1 Expired Certificate
-  * [https://expired-isrgrootx1.letsencrypt.org/](https://expired-isrgrootx1.letsencrypt.org/)
+  * [https://expired.x1.test-certs.letsencrypt.org/](https://expired.x1.test-certs.letsencrypt.org/)
 
 # Posrednički Sertifikati
 
diff --git a/content/sv/certificates.md b/content/sv/certificates.md
index 5c64c783d..1aa3300b4 100644
--- a/content/sv/certificates.md
+++ b/content/sv/certificates.md
@@ -20,11 +20,11 @@ Vi har skapat webbsidor för att testa certifikatkedjning till våra
 rotcertifikat.
 
 * Giltigt ISRG Root X1-signerat certifikat
-  * [https://valid-isrgrootx1.letsencrypt.org/](https://valid-isrgrootx1.letsencrypt.org/)
+  * [https://valid.x1.test-certs.letsencrypt.org/](https://valid.x1.test-certs.letsencrypt.org/)
 * Återkallat ISRG Root X1-signerat certifikat
-  * [https://revoked-isrgrootx1.letsencrypt.org/](https://revoked-isrgrootx1.letsencrypt.org/)
+  * [https://revoked.x1.test-certs.letsencrypt.org/](https://revoked.x1.test-certs.letsencrypt.org/)
 * Utgånget ISRG Root X1-signerat certifikat
-  * [https://expired-isrgrootx1.letsencrypt.org/](https://expired-isrgrootx1.letsencrypt.org/)
+  * [https://expired.x1.test-certs.letsencrypt.org/](https://expired.x1.test-certs.letsencrypt.org/)
 
 # Mellancertifikat
 
diff --git a/content/uk/certificates.md b/content/uk/certificates.md
index 67b3f0198..b99ad0fbd 100644
--- a/content/uk/certificates.md
+++ b/content/uk/certificates.md
@@ -23,7 +23,7 @@ show_lastmod: 1
   * Дані центру сертифікації: [crt.sh](https://crt.sh/?caid=7394), [видані сертифікати](https://crt.sh/?Identity=%25&iCAID=7394)
   * Реквізити сертифіката (само підпис): [crt.sh](https://crt.sh/?id=9314791), [der](/certs/isrgrootx1.der), [pem](/certs/isrgrootx1.pem), [txt](/certs/isrgrootx1.txt)
   * Реквізити сертифікатів (підписані перехресним підписом DST Root CA X3): [crt.sh](https://crt.sh/?id=3958242236), [der](/certs/isrg-root-x1-cross-signed.der), [pem](/certs/isrg-root-x1-cross-signed.pem), [txt](/certs/isrg-root-x1-cross-signed.txt) (відкликаний)
-  * Тестові сайти: [дійсний](https://valid-isrgrootx1.letsencrypt.org/), [відкликаний](https://revoked-isrgrootx1.letsencrypt.org/), [закінчився](https://expired-isrgrootx1.letsencrypt.org/)
+  * Тестові сайти: [дійсний](https://valid.x1.test-certs.letsencrypt.org/), [відкликаний](https://revoked.x1.test-certs.letsencrypt.org/), [закінчився](https://expired.x1.test-certs.letsencrypt.org/)
 * **ISRG коріньX2**
   * Тема: `O = Internet Security Research Group, CN = ISRG Root X2`
   * Тип ключа: `ECDSA P-384`
@@ -31,7 +31,7 @@ show_lastmod: 1
   * Дані центру сертифікації: [crt.sh](https://crt.sh/?caid=183269), [видані сертифікати](https://crt.sh/?Identity=%25&iCAID=183269)
   * Реквізити сертифіката (само підпис): [crt.sh](https://crt.sh/?id=3335562555), [der](/certs/isrg-root-x2.der), [pem](/certs/isrg-root-x2.pem), [txt](/certs/isrg-root-x2.txt)
   * Реквізити сертифіката (з перехресним підписом ISRG Root X1): [crt.sh](https://crt.sh/?id=3334561878), [der](/certs/isrg-root-x2-cross-signed.der), [pem](/certs/isrg-root-x2-cross-signed.pem), [txt](/certs/isrg-root-x2-cross-signed.txt)
-  * Тестові сайти: [дійсний](https://valid-isrgrootx2.letsencrypt.org/), [відкликаний](https://revoked-isrgrootx2.letsencrypt.org/), [закінчився](https://expired-isrgrootx2.letsencrypt.org/)
+  * Тестові сайти: [дійсний](https://valid.x2.test-certs.letsencrypt.org/), [відкликаний](https://revoked.x2.test-certs.letsencrypt.org/), [закінчився](https://expired.x2.test-certs.letsencrypt.org/)
 
 Додаткову інформацію про сумісність наших кореневих сертифікатів з різними пристроями та сховищами довіри можна знайти в статті [Сумісність сертифікатів](/docs/cert-compat).
 
diff --git a/content/zh-cn/certificates.md b/content/zh-cn/certificates.md
index 7aea223fb..30d9c46fe 100644
--- a/content/zh-cn/certificates.md
+++ b/content/zh-cn/certificates.md
@@ -24,7 +24,7 @@ show_lastmod: 1
   * 证书详细信息（自签名版本）：[crt.sh](https://crt.sh/?id=9314791)、[der](/certs/isrgrootx1.der)、[pem](/certs/isrgrootx1.pem)、[txt](/certs/isrgrootx1.txt)
   * 证书详细信息（DST Root CA X3 交叉签名的版本）：[crt.sh](https://crt.sh/?id=3958242236)、[der](/certs/isrg-root-x1-cross-signed.der)、[pem](/certs/isrg-root-x1-cross-signed.pem)、[txt](/certs/isrg-root-x1-cross-signed.txt)（现已不再使用）
   * CRL 域名：`x1.c.lencr.org`
-  * 测试网站：[正常证书](https://valid-isrgrootx1.letsencrypt.org/)、[已吊销证书](https://revoked-isrgrootx1.letsencrypt.org/)、[已过期证书](https://expired-isrgrootx1.letsencrypt.org/)
+  * 测试网站：[正常证书](https://valid.x1.test-certs.letsencrypt.org/)、[已吊销证书](https://revoked.x1.test-certs.letsencrypt.org/)、[已过期证书](https://expired.x1.test-certs.letsencrypt.org/)
 * **ISRG Root X2**
   * 主体：`O = Internet Security Research Group, CN = ISRG Root X2`
   * 密钥类型：`ECDSA P-384`
@@ -34,7 +34,7 @@ show_lastmod: 1
   * 证书详细信息（ISRG Root X1 交叉签名的版本）：[crt.sh](https://crt.sh/?id=3334561878)、[der](/certs/isrg-root-x2-cross-signed.der)、[pem](/certs/isrg-root-x2-cross-signed.pem)、[txt](/certs/isrg-root-x2-cross-signed.txt)
   * 证书详细信息（ISRG Root X1 第二次交叉签名的版本）：[crt.sh](https://crt.sh/?id=20878422868)、[der](/certs/gen-y/root-x2-by-x1.der)、[pem](/certs/gen-y/root-x2-by-x1.pem)、[txt](/certs/gen-y/root-x2-by-x1.txt)
   * CRL 域名：`x2.c.lencr.org`
-  * 测试网站：[正常证书](https://valid-isrgrootx2.letsencrypt.org/)、[已吊销证书](https://revoked-isrgrootx2.letsencrypt.org/)、[已过期证书](https://expired-isrgrootx2.letsencrypt.org/)
+  * 测试网站：[正常证书](https://valid.x2.test-certs.letsencrypt.org/)、[已吊销证书](https://revoked.x2.test-certs.letsencrypt.org/)、[已过期证书](https://expired.x2.test-certs.letsencrypt.org/)
 
 下列根证书尚未加入各类可信证书库，但近期将进入申请阶段：
 
diff --git a/content/zh-tw/certificates.md b/content/zh-tw/certificates.md
index e3a9d078d..5913013d8 100644
--- a/content/zh-tw/certificates.md
+++ b/content/zh-tw/certificates.md
@@ -17,11 +17,11 @@ show_lastmod: 1
 我們設置了以下網站，用來測試由根憑證所簽發的憑證鏈是否有效。
 
 * ISRG Root X1 有效憑證
-  * [https://valid-isrgrootx1.letsencrypt.org/](https://valid-isrgrootx1.letsencrypt.org/)
+  * [https://valid.x1.test-certs.letsencrypt.org/](https://valid.x1.test-certs.letsencrypt.org/)
 * ISRG Root X1 已註銷憑證
-  * [https://revoked-isrgrootx1.letsencrypt.org/](https://revoked-isrgrootx1.letsencrypt.org/)
+  * [https://revoked.x1.test-certs.letsencrypt.org/](https://revoked.x1.test-certs.letsencrypt.org/)
 * ISRG Root X1 已過期憑證
-  * [https://expired-isrgrootx1.letsencrypt.org/](https://expired-isrgrootx1.letsencrypt.org/)
+  * [https://expired.x1.test-certs.letsencrypt.org/](https://expired.x1.test-certs.letsencrypt.org/)
 
 # 中間憑證