Issues

• Construct landmark-relative certs in the MTCB

  letsencrypt/boulder#9170 · Filter by author aarongable opened on Nov 10, 2026

• Expose landmark-relative certificate URLs in the WFE

  letsencrypt/boulder#9169 · Filter by author aarongable opened on Nov 10, 2026

• MTCA ticker for updating the landmarks file

  letsencrypt/boulder#9168 · Filter by author aarongable opened on Nov 10, 2026

• Umbrella bug for supporting the MTC landmark optimization

  letsencrypt/boulder#9167 · Filter by author aarongable opened on Nov 10, 2026

• Consolidate goodkey checks

  letsencrypt/boulder#9155 · Filter by author jsha opened on Nov 4, 2026
  1

• Improve UX for rejecting revocation of shortlived MTCs

  letsencrypt/boulder#9148 · Filter by author aarongable opened on Nov 3, 2026

• Support revocationless (no CRLDP) shortlived MTCs

  letsencrypt/boulder#9147 · Filter by author aarongable opened on Nov 3, 2026 · Sprint 2026-11-10
  

• Support ML-DSA ACME account keys

  letsencrypt/boulder#9146 · Filter by author aarongable opened on Nov 3, 2026 · Sprint 2026-11-10
  

• log: configurable socket path for syslog delivery

  letsencrypt/boulder#9144 · Filter by author jsha opened on Nov 3, 2026

• mtpublisher: Submit to and get cosignatures from the mirrors in cosigners.json

  letsencrypt/boulder#9143 · Filter by author beautifulentropy opened on Nov 3, 2026 · Sprint 2026-11-10
  

• cosigners: Add support for parsing cosigners.json/.pem files

  letsencrypt/boulder#9142 · Filter by author beautifulentropy opened on Nov 3, 2026 · Sprint 2026-11-10
  

• Update dns-persist-01 implementation to draft -02

  letsencrypt/boulder#9127 · Filter by author aarongable opened on Oct 27, 2026 · Sprint 2026-11-10
  

• wfe: supply Certificate Properties block when client indicates via HTTP Accept

  letsencrypt/boulder#9125 · Filter by author ezekiel opened on Oct 26, 2026

• mtcb: self-verification (including mirror signatures)

  letsencrypt/boulder#9085 · Filter by author jsha opened on Oct 2, 2026 · Sprint 2026-11-03
  2

• Add Cloudflare Azul as a mirroring cosigner in addition to Sunlight

  letsencrypt/boulder#9075 · Filter by author beautifulentropy opened on Sep 30, 2026

• observer: additional CRL checks

  letsencrypt/boulder#9055 · Filter by author inahga opened on Sep 24, 2026

• mtpublisher + mtcb: Implement tile cache

  letsencrypt/boulder#9054 · Filter by author beautifulentropy opened on Sep 23, 2026

• mtcb: Implement tile cache

  letsencrypt/boulder#9053 · Filter by author beautifulentropy opened on Sep 23, 2026

• mtjanitor: Prune superseded partial tiles

  letsencrypt/boulder#9052 · Filter by author beautifulentropy opened on Sep 23, 2026

• mtjanitor: Delete pending tiles that the mtca failed to delete

  letsencrypt/boulder#9051 · Filter by author beautifulentropy opened on Sep 23, 2026

• mtca: Delete pending tiles as part of issuance tick

  letsencrypt/boulder#9050 · Filter by author beautifulentropy opened on Sep 23, 2026

• Rare finalize failures due to db deadlock

  letsencrypt/boulder#9048 · Filter by author mcpherrinm opened on Sep 23, 2026

• Umbrella bug for post-Staging MTC development

  letsencrypt/boulder#9046 · Filter by author beautifulentropy opened on Sep 23, 2026

• Remove deprecated support for singular HostnamePolicyFile and Blocklist stanzas

  letsencrypt/boulder#9040 · Filter by author ezekiel opened on Sep 22, 2026 · Sprint 2026-10-06
  

• mtca + publisher: implement the subtree optimization

  letsencrypt/boulder#9039 · Filter by author aarongable opened on Sep 22, 2026 · Sprint 2026-11-10