Return to the list of client alerts

Let’s Encrypt Became Let’s Revoke Today

Let’s Encrypt, the automated SSL certificate service discovered a bug in their certificate generation process that goes back to July 25, 2019.  As a result, they will revoke 3 million certificates TODAY. Web site owners had to replace their certificates by 0000 UTC on March 4^th.  In theory, they can do that using a simple command line command, but some users were having difficulty.  If the web site operators do not replace their certificates in time, visitors to the site will get a security warning and, depending on the browser, may have to jump through hoops to visit an impacted site.

As a result, this affects both web site operators who have to replace their certificates and visitors to the affected sites who will get a warning message if the web site operator did not replace the certificate yet.

Source: The Register