No. The Let's Encrypt root was recently created and will be submitted to root inclusion programs. It will probably be quite a while until its suitable to issue certs solely from the Let's Encrypt Root.
For now, the certs are cross signed by "DST Root CA X3" operated by Identrust. This root has very strong inclusion.
Comments
No. The Let's Encrypt root was recently created and will be submitted to root inclusion programs. It will probably be quite a while until its suitable to issue certs solely from the Let's Encrypt Root.
For now, the certs are cross signed by "DST Root CA X3" operated by Identrust. This root has very strong inclusion.
For specifics, please see: https://groups.google.com/a/letsencrypt.org/forum/#!msg/clie...
Dangit, I didn't read the second paragraph. For GA, they will have the cross-sign. It's just for the EA that they don't.