We have updated the certificate installer app to bundle the "Signed by ISRG Root X1" intermediate certificate.
Posted Sep 28, 2021 - 09:05 UTC
Update
The HTTPS Redirector has been updated with the new intermediate certificate. Effective immediately, all new HTTPS handshakes will use the certificate R3 Signed by ISRG Root X1.
Posted Sep 28, 2021 - 08:35 UTC
Identified
We have identified the use of a soon to expire intermediate certificate in the certificate bundle we provide for download via the DNSimple application when installing a Let's Encrypt certificate. The same certificate is also currently used by our Redirector when handling HTTPS redirects using a Let's Encrypt certificate. https://support.dnsimple.com/articles/redirector/#https-redirects
The certificate is the **Intermediate R3 Cross-signed by IdenTrust**. Currently, there are no issues as the certificate is still valid.
We are taking the following proactive actions:
1. Replace the certificate in our Redirector to use **Signed by ISRG Root X1** 2. Replace the certificate in our application installer to use **Signed by ISRG Root X1** 3. Notify all customers
We are also preparing support documentation that will reference the Let's Encrypt post "DST Root CA X3 Expiration (September 2021) and the caveats that users will need to be aware regarding compatibility with older API clients and/or OpenSSL versions. https://letsencrypt.org/docs/dst-root-ca-x3-expiration-september-2021/
Posted Sep 27, 2021 - 12:49 UTC
This incident affected: URL Redirector and SSL Certificates.