Comment Comment by thehairyone Of course the cross signed cert works!That not the point.The cross signature is worthless if the signed cert beneath it is self-signed.If Identrust cross signed self signed certs, the self signed cert would be trusted too... and it would "work" in all browsers...Coly Tarry Frap Tarts! you're daft.Here try this:1. Setup a domain with an MX record that points off domain and a dmarc p=reject record...2. Try to get a cert from any CA other than Lets Encrypt without answering any emails sent to the off domain MX....Then... install Lets Encrypt... bam-o! Cert heaven!It's self-gawd-damn-fing-signed. parent thehairyone 10 years ago
That not the point.
The cross signature is worthless if the signed cert beneath it is self-signed.
If Identrust cross signed self signed certs, the self signed cert would be trusted too... and it would "work" in all browsers...
Coly Tarry Frap Tarts! you're daft.
Here try this:
1. Setup a domain with an MX record that points off domain and a dmarc p=reject record...
2. Try to get a cert from any CA other than Lets Encrypt without answering any emails sent to the off domain MX.
...
Then... install Lets Encrypt... bam-o! Cert heaven!
It's self-gawd-damn-fing-signed.