Let's Encrypt will issue new intermediate certs in Q1/2024: https://groups.google.com/a/mozilla.org/g/dev-security-policy/c/L7XoAXt_s1c

Make sure your LE cert deployment logic includes serving the right intermediates that ACME should hand you, not just that same old LE intermediate you got years ago. Otherwise, there'll be breakage...

#x509 #pki #LetsEncrypt

Let's Encrypt New Intermediate Certificates

@jschauma @tychotithonus thankfully, ACME makes the sensible way the easier way ("here's all the certs you need" in the issuance response) so with a bit of luck not too many people will have done the extra work to get it wrong.