BO claims that it cost $10,000 a month to run this board, I call BULL FUCKING shit. The ssl certificates cant even be bought, its all FOSS, free and open source. Linux in other words.
BO is full of shit, pulled that number out of her fat ass.
Lets Encrypt
Last updated: Oct 2, 2021
https://community.letsencrypt.org/
https://letsencrypt.org/certificates/
https://www.devdungeon.com/content/letsencrypt-free-ssl-certificate-tutorial
Root Certificates
Our roots are kept safely offline. We issue end-entity certificates to subscribers from the intermediates in the next section. For additional compatibility as we submit our new Root X2 to various root programs, we have also cross-signed it from Root X1.
We’ve set up websites to test certificates chaining to our active roots.
ISRG Root X1
Valid
Revoked
Expired
ISRG Root X2
Valid
Revoked
Expired
Intermediate Certificates
Under normal circumstances, certificates issued by Let’s Encrypt will come from “R3”, an RSA intermediate. Currently, issuance from “E1”, an ECDSA intermediate, is possible only for ECDSA subscriber keys for allowlisted accounts. In the future, issuance from “E1” will be available for everyone.
Our other intermediates (“R4” and “E2”) are reserved for disaster recovery and will only be used should we lose the ability to issue with our primary intermediates. We do not use the X1, X2, X3, and X4 intermediates anymore.
IdenTrust has cross-signed our RSA intermediates for additional compatibility.
Active
Let’s Encrypt R3 (RSA 2048, O = Let's Encrypt, CN = R3)
Signed by ISRG Root X1: der, pem, txt
Cross Signing Intermediates
Each of our intermediates represents a single public/private key pair. The private key of that pair generates the signature for all end-entity certificates (also known as leaf certificates), i.e. the certificates we issue for use on your server.
Similar to intermediates, root certificates can be cross-signed, often to increase client compatibility. Our ECDSA root, ISRG Root X2 was generated in fall 2020 and is the root certificate for the ECDSA hierarchy. It is represented by two certificates: one that is self-signed
ISRG Root OCSP X1 (Signed by ISRG Root X1): der, pem, txt
Our newer intermediates do not have OCSP URLs (their revocation information is instead served via CRL), so we have not issued an OCSP Signing Cert from ISRG Root X2.
Certificate Transparency
We are dedicated to transparency in our operations and in the certificates we issue. We submit all certificates to Certificate Transparency logs as we issue them. You can view all issued Let’s Encrypt certificates via these links:
Issued by Let’s Encrypt Authority X1
Issued by Let’s Encrypt Authority X3
Issued by E1
Issued by R3
Support a more secure and privacy-respecting Web.
Donate