Will Cloudflare Pages Automatically Migrate Retired Let's Encrypt Certificates?
I'm hosting websites using Cloudflare Pages. I would like to know if Cloudflare Pages supports automatic migration for Let's Encrypt certificates that are being retired.
As of 2024/7/11, it seems that Let's Encrypt certificates are still being used on my website. According to the blog post below, the automatic migration for certificates like Universal SSL and SSL for SaaS is mentioned, but there is no information about Cloudflare Pages.
https://blog.cloudflare.com/shortening-lets-encrypt-change-of-trust-no-impact-to-cloudflare-customers
I apologize for asking again, but I have previously asked a similar question and it was not resolved.
Could someone clarify if Cloudflare Pages will handle the automatic migration for these retired certificates?
The Cloudflare Blog
How we ensure Cloudflare customers aren't affected by Let's Encrypt...
Let’s Encrypt’s cross-signed chain will be expiring in September. This will affect legacy devices with outdated trust stores (Android versions 7.1.1 or older). To prevent this change from impacting customers, Cloudflare will shift Let’s Encrypt certificates upon renewal to use a different CA
5 Replies
Yes, it should migrate to a new certificate automatically
Thank you very much for confirming that the migration to a new certificate will happen automatically. I truly appreciate your assistance.
Could you kindly provide the source of this information? Additionally, if you have any details on the expected timing for the migration, that would be extremely helpful.
Thank you once again for your support!
I wouldn't know the exact timing. Cloudflare automatically manages certificate changes as they expire/go out of service, and I don't think there is a specific time that this happens
Yes, we will handle it automatically. As for when, there won't be a set time it'll be over the course of a little bit and the timeline may change at any point.
We're making sure it's done safely though no worries
Thank you both for providing the information; I appreciate it!
Based on my understanding, while the exact date is unclear, the migration should be completed by the following dates. Could you please let me know if this understanding is correct? I apologize for being persistent, but I am concerned about the potential impact on users if the migration does not occur automatically by this date.
>September 9, 2024: Cloudflare will stop using the cross-signed chain, both in certificate issuance and in certificate bundling.
https://developers.cloudflare.com/ssl/reference/migration-guides/lets-encrypt-chain#important-dates
Cloudflare Docs
Let's Encrypt chain update · Cloudflare SSL/TLS docs
Review notes on the expiration of ISRG Root X1 cross-signed with DST Root CA X3, and how it may affect Cloudflare customers that use Let’s Encrypt.