<font face="arial" size="3"><p style="margin:0;padding:0;"> </p>
<p style="margin:0;padding:0;font-family: arial; font-size: 12pt; overflow-wrap: break-word;"> </p>
<div id="SafeStyles1583289573">
<div style="text-align: justify; word-wrap: break-word;">
<p style="margin:0;padding:0;margin: 0; padding: 0; font-family: arial; font-size: 12pt; overflow-wrap: break-word;">"Let's Encrypt will revoke over 3 million certificates on Wednesday, March 4th, due to a bug in their domain validation and issuance software. A bug in Let's Encrypt's certificate authority (CA) software caused some certificates to not be properly validated through Certificate Authority Authorization (CAA) configured for an associated domain. CAA is a security feature that allows domain administrators to create a DNS record that restricts the certificate authorities that are allowed to issue certificates for that particular domain."<br /><em>Priority: <span style="color: orange;">2 - Urgent</span></em> <br /><em>Relevance: General</em></p>
<div style="font-size: 85%; padding: 5px; overflow-wrap: anywhere;"><<a href="https://www.bleepingcomputer.com/news/security/lets-encrypt-to-revoke-3-million-tls-certificates-due-to-bug/">https://www.bleepingcomputer.com/news/security/lets-encrypt-to-revoke-3-million-tls-certificates-due-to-bug/</a>><br /> <<a href="https://community.letsencrypt.org/t/revoking-certain-certificates-on-march-4/114864">https://community.letsencrypt.org/t/revoking-certain-certificates-on-march-4/114864</a>><br /> <<a href="https://community.letsencrypt.org/t/2020-02-29-caa-rechecking-bug/114591">https://community.letsencrypt.org/t/2020-02-29-caa-rechecking-bug/114591</a>><br /> <<a href="https://letsencrypt.org/caaproblem/">https://letsencrypt.org/caaproblem/</a>><br /> <<a href="https://checkhost.unboundtest.com/">https://checkhost.unboundtest.com/</a>><br /> <<a href="https://www.theregister.co.uk/2020/03/03/lets_encrypt_cert_revocation/">https://www.theregister.co.uk/2020/03/03/lets_encrypt_cert_revocation/</a>><br /> <<a href="https://www.zdnet.com/article/lets-encrypt-to-revoke-3-million-certificates-on-march-4-due-to-bug/">https://www.zdnet.com/article/lets-encrypt-to-revoke-3-million-certificates-on-march-4-due-to-bug/</a>></div>
</div>
</div></font>