The keys and certificates that will underlie Let’s Encrypt have been generated. This was done during a key ceremony at a secure facility today. The following objects were created:
Key pair and self-signed cert for the ISRG root
Key pair and certificate for the ISRG root’s OCSP
Key pairs and certificates for two Let’s Encrypt intermediate CAs
CRL under the ISRG root showing that the Let’s Encrypt intermediates have not been revoked