Let’s Encrypt changed plan about revoking certificates

If your SSL certificate was issued by Let’s Encrypt, there was risk for their bug. Check the safety of your SSL certificate.

Jangwook Kim
2 min readMar 7, 2020
SSL Certificate

In 29 February 2020, Let’s Encrypt announced they found a bug in their CAA code, so they decided to revoke 2.6% of all certificates.

But they gave us just 36 hours to refresh certificates, and that is too short time to notice we need to some action. Almost 1 million certificates aren’t refreshed before 30 minutes of the revocation.

So Let’s Encrypt announced again that they don’t revoke certificates force.

Because the certificate life time is only 90 days, so they can decide like this.

--

--

Jangwook Kim

Korean, live in Japan. The programmer. I love to learn something new things. I’m publishing my toy projects using GitHub. Visit https://www.jangwook.net.