top | item 38829559

(no title)

chtitux | 2 years ago

The number of certificates issued/inserted on 25th December, which is almost the same as any other day in December, while being a bank holiday in most Western countries, makes me happy: the industry successfully made certificate renewal fully automatic.

For LetsEncrypt, all renewal requests are done with ACME clients, so this is not a surprise.

I'm curious to know which part of DigiCert and Certigo certificates are actually renewed with an ACME request (both support it).

discuss

order

slowbdotro|2 years ago

Certigo is ZeroSSL for all intensive purposes (as far as I am concerned) so probably close to all of them were acme clients.

Digicert has been pushing acme for a while now, but it's a bit annoying as you (my company) needed to prepay/have a line of credit for it, or some annoyance that didn't make it as seemless as LE/ZeroSSL.

I think for digicert any of the certs with 89/90 day expiry would be acme renewals with a near 100% certainty.

eru|2 years ago

Off-topic PSA: you probably wanted to write either 'for all intents and purposes' or 'for all intensive porpoises', if you are making a joke.

candiddevmike|2 years ago

What's the value prop of Digicert over LE these days?