But, you can still use Let's Encrypt with old Android devices until the later part of 2021 using the alternate chain: https://letsencrypt.org/2020/11/06/own-two-feet.html (As a point of reference, Caddy supports configuring this alternate chain.)
Sectigo is the new name for Comodo. The same bunch of pricks who tried to trademark “Let’s Encrypt”.
Other players in the acme cert “business” is great. Renaming a slime ball name and carrying on like nothing happened is not ok.
Yes. The intermediate certificate has been included since Android 6.0 [1] and the root expires in 2038 [2].
[1] https://android.googlesource.com/platform/system/ca-certific...
It seems that there is no real alternative... Let's Encrypt's move is going to obsolete a huge lot of devices :-/
That doesn't matter, the root that signed the intermediate cert was created in 2010 [1] which means it's usable for Android>=2.2.
You can limit certificate issuance to a single issuer via CAA in DNS, so you could set your domains to use ZeroSSL exclusively and ZeroSSL could validate ownership of a domain to allow you to create that hierarchy.
I can think of a lot of value added services that can be sold alongside SSL certificates. One example would be CTLog monitoring including for lookalike (FACEB00K) issuances.
The other thing with SSL is that a lot of people equate it with domain security, so I think there's a certain level of domain monitoring that could be sold alongside certificates. Things like domain expiration monitoring, registration of lookalike domains, NS changes, DMARC reporting, etc. all start to feel like a single "domain security" service.
> In an effort to ensure the widest possible SSL certificate coverage around the world, our team has decided to keep all ZeroSSL certificates created using the ACME protocol completely free of charge.
https://zerossl.com/features/acme/