Upcoming Let’s Encrypt certificate chain change and impact for Cloudflare customers
Mar 14, 2024Dina Kozlov

Summary
This post details Cloudflare's proactive management of a critical upcoming change in Let's Encrypt's certificate chain, which will impact legacy devices. Cloudflare is transitioning to Let's Encrypt's ISRG Root X1 chain and provides guidance for customers to mitigate potential client-side issues, including options for Enterprise customers to switch to Google Trust Services. The post also reflects on past advancements in TLS adoption and PKI agility, highlighting Cloudflare's commitment to supporting new security standards for a more secure internet.
More from the Website Security & Threat Management trail
- We tested our own WAF with frontier AI models. Here’s what we found
- When scanners miss the attack: how Cloudflare Client-Side Security protects storefronts
- Introducing automatic remediation policies with Cloudflare CASB
- Introducing context-aware vulnerability discovery and remediation with Cloudflare Managed Defense and OpenAI Daybreak Models
- Introducing Adaptive Intelligence: undermining the economics of every bot attack