Skip to content

Link YE/YR test sites from website #2181

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
scottmakestech merged 4 commits into from
Apr 10, 2026
Merged

Link YE/YR test sites from website #2181

Changes from 1 commit
Commits
Show all changes
4 commits
Select commit Hold shift + click to select a range
1c2bb00
Link YE/YR test sites from website
mcpherrinm Mar 27, 2026
4fafbaf
Keep trailing slashes
mcpherrinm Mar 27, 2026
6031b3b
Also update link in old blog post
mcpherrinm Mar 27, 2026
92801f4
Update URL in al the translated pages
mcpherrinm Apr 3, 2026
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
10 changes: 5 additions & 5 deletions content/en/certificates.md
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -2,7 +2,7 @@
title: Chains of Trust
linkTitle: Chains of Trust (Root and Intermediate Certificates)
slug: certificates
lastmod: 2026-01-08
lastmod: 2026-03-27
show_lastmod: 1
---

Expand All @@ -24,7 +24,7 @@ Note that Root CAs don't have expiration dates in quite the same way that other
* Certificate details (self-signed): [crt.sh](https://crt.sh/?id=9314791), [der](/certs/isrgrootx1.der), [pem](/certs/isrgrootx1.pem), [txt](/certs/isrgrootx1.txt)
* Certificate details (cross-signed by DST Root CA X3): [crt.sh](https://crt.sh/?id=3958242236), [der](/certs/isrg-root-x1-cross-signed.der), [pem](/certs/isrg-root-x1-cross-signed.pem), [txt](/certs/isrg-root-x1-cross-signed.txt) (retired)
* CRL hostname: `x1.c.lencr.org`
* Test websites: [valid](https://valid-isrgrootx1.letsencrypt.org/), [revoked](https://revoked-isrgrootx1.letsencrypt.org/), [expired](https://expired-isrgrootx1.letsencrypt.org/)
* Test websites: [valid](https://valid.x1.test-certs.letsencrypt.org), [revoked](https://revoked.x1.test-certs.letsencrypt.org), [expired](https://expired.x1.test-certs.letsencrypt.org)
* **ISRG Root X2**
* Subject: `O = Internet Security Research Group, CN = ISRG Root X2`
* Key type: `ECDSA P-384`
Expand All @@ -34,7 +34,7 @@ Note that Root CAs don't have expiration dates in quite the same way that other
* Certificate details (cross-signed by ISRG Root X1): [crt.sh](https://crt.sh/?id=3334561878), [der](/certs/isrg-root-x2-cross-signed.der), [pem](/certs/isrg-root-x2-cross-signed.pem), [txt](/certs/isrg-root-x2-cross-signed.txt)
* Certificate details (second cross-sign by ISRG Root X1): [crt.sh](https://crt.sh/?id=20878422868), [der](/certs/gen-y/root-x2-by-x1.der), [pem](/certs/gen-y/root-x2-by-x1.pem), [txt](/certs/gen-y/root-x2-by-x1.txt)
* CRL hostname: `x2.c.lencr.org`
* Test websites: [valid](https://valid-isrgrootx2.letsencrypt.org/), [revoked](https://revoked-isrgrootx2.letsencrypt.org/), [expired](https://expired-isrgrootx2.letsencrypt.org/)
* Test websites: [valid](https://valid.x2.test-certs.letsencrypt.org), [revoked](https://revoked.x2.test-certs.letsencrypt.org), [expired](https://expired.x2.test-certs.letsencrypt.org)

These roots are not yet included in Root Program Trust Stores, but will be submitted for inclusion soon:

Expand All @@ -46,7 +46,7 @@ These roots are not yet included in Root Program Trust Stores, but will be submi
* Certificate details (self-signed): [der](/certs/gen-y/root-ye.der), [pem](/certs/gen-y/root-ye.pem), [txt](/certs/gen-y/root-ye.txt)
* Certificate details (cross-signed by ISRG Root X2): [der](/certs/gen-y/root-ye-by-x2.der), [pem](/certs/gen-y/root-ye-by-x2.pem), [txt](/certs/gen-y/root-ye-by-x2.txt)
* CRL hostname: `ye.c.lencr.org`
* Test websites: Forthcoming
* Test websites: [valid](https://valid.ye.test-certs.letsencrypt.org), [revoked](https://revoked.ye.test-certs.letsencrypt.org), [expired](https://expired.ye.test-certs.letsencrypt.org)
* **ISRG Root YR**
* Subject: `O = ISRG, CN = Root YR`
* Key type: `RSA 4096`
Expand All @@ -55,7 +55,7 @@ These roots are not yet included in Root Program Trust Stores, but will be submi
* Certificate details (self-signed): [der](/certs/gen-y/root-yr.der), [pem](/certs/gen-y/root-yr.pem), [txt](/certs/gen-y/root-yr.txt)
* Certificate details (cross-signed by ISRG Root X1): [der](/certs/gen-y/root-yr-by-x1.der), [pem](/certs/gen-y/root-yr-by-x1.pem), [txt](/certs/gen-y/root-yr-by-x1.txt)
* CRL hostname: `yr.c.lencr.org`
* Test websites: Forthcoming
* Test websites: [valid](https://valid.yr.test-certs.letsencrypt.org), [revoked](https://revoked.yr.test-certs.letsencrypt.org), [expired](https://expired.yr.test-certs.letsencrypt.org)

For additional information on the compatibility of our root certificates with various devices and trust stores, see [Certificate Compatibility](/docs/cert-compat).

Expand Down
Loading