Maybe it's just the effect legalese sometimes has of making your head spin, but that looks like kind of a lot of "ifs" for something that's being touted as so universal it can justify killing HTTP.
A few requirements:
- You have not participated in the seizure of a
domain name that had ongoing lawful uses
- all information in Your Certificate regarding You or Your domain name is accurate, current, reliable, complete, and not misleading
- all information You have provided to ISRG is accurate, current, complete, reliable, complete, and not misleading
- You have taken all appropriate, reasonable, and necessary steps to secure and keep your Private Key secret
They can send you away even if you do everything they ask:
- ISRG may, in its sole discretion, refuse to grant Your request for a Let’s Encrypt Certificate, including for
reasons not stated in this Agreement
- ISRG may also, without advanced notice, revoke Your Certificate if it determines, in its sole discretion,
that … Your Certificate has become unreliable
- ISRG may also, without advanced notice, revoke Your Certificate if it determines, in its sole discretion,
that … information in your registration with ISRG or request for an Let’s Encrypt Certificate has changed
A few requirements:
- You have not participated in the seizure of a domain name that had ongoing lawful uses
- all information in Your Certificate regarding You or Your domain name is accurate, current, reliable, complete, and not misleading
- all information You have provided to ISRG is accurate, current, complete, reliable, complete, and not misleading
- You have taken all appropriate, reasonable, and necessary steps to secure and keep your Private Key secret
They can send you away even if you do everything they ask:
- ISRG may, in its sole discretion, refuse to grant Your request for a Let’s Encrypt Certificate, including for reasons not stated in this Agreement
- ISRG may also, without advanced notice, revoke Your Certificate if it determines, in its sole discretion, that … Your Certificate has become unreliable
- ISRG may also, without advanced notice, revoke Your Certificate if it determines, in its sole discretion, that … information in your registration with ISRG or request for an Let’s Encrypt Certificate has changed