Standing on Our Own Two Feet – Let’s Encrypt

[Update] Let’s Encrypt Extends Support for Android 7 or Older Devices for Three Years

Let’s Encrypt announced its partnership with IdenTrust will come to an end by September 1, 2021. Except for its own root certificate, Let’s Encrypt has been using a cross-signed certificate from IdenTrust. The decision to part ways is dubbed as the company is standing on its own two feet.

Five years ago, when Let’s Encrypt launched, that’s exactly what we did. We got a cross-signature from IdenTrust. Their “DST Root X3” had been around for a long time, and all the major software platforms trusted it already: Windows, Firefox, macOS, Android, iOS, and a variety of Linux distributions. That cross-signature allowed us to start issuing certificates right away, and have them be useful to a lot of people. Without IdenTrust, Let’s Encrypt may have never happened and we are grateful to them for their partnership. Meanwhile, we issued our own root certificate (“ISRG Root X1”) and applied for it to be trusted by the major software platforms.

via Let’s Encrypt

However by the time the changes come into force next September 2021, the transition would cause compatibility issues with the devices that are running Android 7.1.1 or older version. It means the older versions of Android will no longer trust Let’s Encrypt root certificate called ISRG Root X1.

Let’s Encrypt therefore recommends affected users to install Firefox Mobile, which currently supports Android 5.0 and above.

Statistics for users of Android 7.1.1 and below

🇳🇱 Netherlands ~ 12%

🇺🇸 United States ~ 8%

🇹🇭 Thailand ~ 18%

Source: https://deviceatlas.com/blog/mobile-os-versions-by-country#th

If you are a site owner under our hosting service

You may contact us directly for alternative certificate chains or for any questions about your SSL certificate.

If you are not sure if you are using Let’s Encrypt SSL, or if you are worried that (a part of) your potential visitors are affected by this Let’s Encrypt update, contact us directly. The best solution, depends on your use case, but it’s likely a paid SSL certificate, as they are around longer and well trusted.

Mozilla Firefox 85.00 is Here!

By Rutger | January 30, 2021

The popular open-source web browser Mozilla Firefox finally released version 85.00. With significant updates including the much-awaited major privacy enhancement called network partitioning. Check out the major improvements and what’s been added and changed for the latest Firefox 85.00. What’s new? The Adobe’s popular software Flash Player is no longer supported by Firefox 85. “There is…

Update: Let’s Encrypt Extends Support for Android 7 or Older Devices for Three Years

By Rutger | January 13, 2021

Back in November, Let’s Encrypt an open certificate authority announced an end to its partnership with Identrust and to “Standing on Our Own Two Feet – Let’s Encrypt”. The supposed part ways will cause compatibility issues with Android 7.1.1 or older to not be able to access HTTPS websites.  In its new announcement, Let’s Encrypt has…

Apple and Cloudflare team up to stop your ISP from seeing which websites you visit

By Rutger | December 16, 2020

Apple and Cloudflare team up to develop a new internet protocol called “Oblivious DNS-over-HTTPS,” or “ODoH,” which can prevent Internet Service Providers (ISP) from knowing which websites you visit. When visiting a website the request sent can be logged and tells your ISP which websites you visited, down to the hostnames and subdomains. This information…

Standing on Our Own Two Feet – Let’s Encrypt

By Rutger | November 13, 2020

[Update] Let’s Encrypt Extends Support for Android 7 or Older Devices for Three Years Let’s Encrypt announced its partnership with IdenTrust will come to an end by September 1, 2021. Except for its own root certificate, Let’s Encrypt has been using a cross-signed certificate from IdenTrust. The decision to part ways is dubbed as the…

Sharing Meals with Students in Roi Et, Thailand

By Rutger | October 26, 2020

“If you make the world better for kids, you make the world better for everyone”. We have faced a lot of hurdles this year, and I know everyone can’t wait to put this year behind us and start anew.

Why using special DNS Servers is beneficial?

By Rutger | October 14, 2020

With the internet becoming an integral part of every business today, it has also increasingly become important that DNS servers remain stable, secure, and resilient against DNS attacks. By default, you’re most likely using your Internet Server Provider (ISP) DNS servers. DNS queries through ISP’s are vulnerable to attacks as it does not always use…

Make WordPress Websites Much Faster In 5 Steps

By Rutger | September 25, 2020

What can you do to make your WordPress website faster? A fast loading website provides an improved user experience and higher rankings in Google and that is good for your website/business.   1. Install a caching plugin What is it? Caching ensures that your page does not have to be “made” continuously. Making it costs…

New Let’s Encrypt SSL Certificates – Free SSL But Beware

By Rutger | September 18, 2020

We offer Let’s Encrypt SSL certificates for a few years now so that together we make the internet more secure. By removing the barrier that SSL certificates cost money, and by easily installing them by pressing a button in the control panel, there is virtually no reason not to use SSL anymore. It is good to…

Keep Your WordPress Site Safe in 6 Steps

By Rutger | September 11, 2020

This is a short but powerful guide on how to keep your WordPress website safe, and protected against hackers and other scum.  Roadmap Step 1: Make sure you have a good backup plan.Ask yourself this question. If your site is now suddenly deleted, can you restore a backup from 1 day back and also from 1…

Activate A Better Spam Filter For Free

By Rutger | September 4, 2020

The new spam filter that we introduced in 2017 works very well. Because of the positive feedback, we have decided to offer this permanently on all our packages without extra costs! You can drastically reduce spam with one click: Via the new account center on my.codeorange.co.th/login you will find an “Advanced Settings” tab under Email settings where you…