Issues

• Add Cloudflare Azul as a mirroring cosigner in addition to Sunlight

  letsencrypt/boulder#9075 · Filter by author beautifulentropy opened on Sep 30, 2026

• mtcb: Return berrors that the RA can pass back to the WFE

  letsencrypt/boulder#9073 · Filter by author beautifulentropy opened on Sep 30, 2026 · Sprint 2026-09-29
  

• mtca: Refactor subtree signing and its cosignedMessage building

  letsencrypt/boulder#9067 · Filter by author ezekiel opened on Sep 29, 2026 · Sprint 2026-09-29
  1

  

• observer: additional CRL checks

  letsencrypt/boulder#9055 · Filter by author inahga opened on Sep 24, 2026

• mtpublisher: Implement tile cache

  letsencrypt/boulder#9054 · Filter by author beautifulentropy opened on Sep 23, 2026

• mtcb: Implement tile cache

  letsencrypt/boulder#9053 · Filter by author beautifulentropy opened on Sep 23, 2026

• mtjanitor: Prune superseded partial tiles

  letsencrypt/boulder#9052 · Filter by author beautifulentropy opened on Sep 23, 2026

• mtjanitor: Delete pending tiles that the mtca failed to delete

  letsencrypt/boulder#9051 · Filter by author beautifulentropy opened on Sep 23, 2026

• mtca: Delete pending tiles as part of issuance tick

  letsencrypt/boulder#9050 · Filter by author beautifulentropy opened on Sep 23, 2026

• Rare finalize failures due to db deadlock

  letsencrypt/boulder#9048 · Filter by author mcpherrinm opened on Sep 23, 2026

• Umbrella bug for post-Staging MTC development

  letsencrypt/boulder#9046 · Filter by author beautifulentropy opened on Sep 23, 2026

• Remove deprecated support for singular HostnamePolicyFile and Blocklist stanzas

  letsencrypt/boulder#9040 · Filter by author ezekiel opened on Sep 22, 2026 · Sprint 2026-09-29
  

• mtca + publisher: implement the subtree optimization

  letsencrypt/boulder#9039 · Filter by author aarongable opened on Sep 22, 2026

• trees: compute covering subtrees for a range of indices

  letsencrypt/boulder#9038 · Filter by author aarongable opened on Sep 22, 2026

• publisher: write subtree signatures into the subtrees table

  letsencrypt/boulder#9037 · Filter by author aarongable opened on Sep 22, 2026 · Sprint 2026-09-29
  

• wfe: New endpoint for serving standalone MTCs

  letsencrypt/boulder#9035 · Filter by author aarongable opened on Sep 22, 2026 · Sprint 2026-09-29
  1

  

• Challenges never transition to the "processing" state

  letsencrypt/boulder#9032 · Filter by author gregtwallace opened on Sep 21, 2026
  4

• mtc: figure out how to gate order "ready" status on availability of subtree signatures

  letsencrypt/boulder#9022 · Filter by author jsha opened on Sep 11, 2026 · Sprint 2026-09-29
  1

  

• genmtpki: use RELATIVE-OID encoding

  letsencrypt/boulder#9021 · Filter by author jsha opened on Sep 11, 2026

• mtca: calculate and write subtrees

  letsencrypt/boulder#9020 · Filter by author jsha opened on Sep 11, 2026

• Differentiate errors when the DNS resolver is unreachable versus a DNS error during validation

  letsencrypt/boulder#9018 · Filter by author mcpherrinm opened on Sep 11, 2026
  1

• Shrink size of CA issuance logs

  letsencrypt/boulder#9015 · Filter by author aarongable opened on Sep 9, 2026

• Expire orders and authzs after too much time processing

  letsencrypt/boulder#9013 · Filter by author aarongable opened on Sep 8, 2026

• Support ECH during http-01 and tls-alpn-01 validation

  letsencrypt/boulder#9009 · Filter by author aarongable opened on Sep 3, 2026

• CI Nits and Improvements

  letsencrypt/boulder#9006 · Filter by author jcjones opened on Sep 2, 2026