Certificate service discontinued

Lancert is an experimental service for obtaining publicly trusted TLS certificates for services running on private networks.

Let’s Encrypt confirmed that the service’s certificate and private-key distribution model conflicts with its Subscriber Agreement and the CA/Browser Forum Baseline Requirements. Certificate issuance, renewal, and downloads have therefore been discontinued.

All unexpired certificates previously issued by Lancert were revoked on 30 July 2026.

Existing DNS records remain operational.

If you are still using a Lancert-issued certificate, replace it with a certificate and private key obtained independently. Do not use Lancert-issued certificates or private keys for new deployments.