Wildcard certificates! \o/

With a little heads-up: "Wildcard identifiers may only be authorized by DNS-01 challenge" (which makes perfectly sense for wildcards)

Sounds like wildcard certs have effectively been delayed a month until late February, then?

The original blog post:

> Let's Encrypt will begin issuing wildcard certificates in January of 2018

I guess it didn't say from their real, trusted root CA rather than their staging CA..

How is the trust of let's encrypt with odd clients like java, older servers, older phones etc?

Let's encrypt certificate is cross signed with IdenTrust, which is widely known, but if you've got an old platform it can fail for other reasons like missing support for SHA2.

See this page for details: https://letsencrypt.org/docs/certificate-compatibility/

Here comes, ONE cert to rule them all.

Which is going to be interesting if a few years from now they do anything wrong and get booted by major OS/browsers. Their certificates are <3 months so it would leave a lot of people scrambling for a solution. It is critical that other CA also adopt ACME to not make Let’s encrypt another too big to fail CA.

Never trust an annoucement about future products/features. I've got burned by Google/appengine several times..