Policy and Legal Repository

Internet Security Research Group (ISRG) is the non-profit entity that operates the Let's Encrypt Certificate Authority. Some policies that apply to Let's Encrypt are ISRG policies, some are specific to Let's Encrypt.

Let's Encrypt Subscriber Agreement

ISRG Combined Certificate Policy and Certification Practice Statement

v5.9, August 29, 2025

Let's Encrypt Privacy Policy

Current Privacy Policy

Let's Encrypt Trademark Policy

Current Trademark Policy

ISRG Code of Conduct

Current ISRG Code of Conduct

ISRG Non-Discrimination Statement and Policy

Current ISRG Non-Discrimination Statement and Policy

ISRG Legal Transparency Reports

October 1, 2025

WebTrust Audits

September 30, 2025: Key Generation Report – WebTrust Principles and Criteria for Certification Authorities – Version 2.2.2
November 20, 2024: Trust Services Principles and Criteria for Certification Authorities Version 2.2.2
November 20, 2024: WebTrust Principles and Criteria for Certification Authorities – SSL Baseline with Network Security – Version 2.7

November 8, 2023: Trust Services Principles and Criteria for Certification Authorities Version 2.2.2
November 8, 2023: WebTrust Principles and Criteria for Certification Authorities – SSL Baseline with Network Security – Version 2.6
November 8, 2022: Trust Services Principles and Criteria for Certification Authorities Version 2.2.2
November 8, 2022: WebTrust Principles and Criteria for Certification Authorities – SSL Baseline with Network Security – Version 2.5
October 14, 2021: Trust Services Principles and Criteria for Certification Authorities Version 2.2.1
October 14, 2021: WebTrust Principles and Criteria for Certification Authorities – SSL Baseline with Network Security – Version 2.4.1
October 2, 2020: Trust Services Principles and Criteria for Certification Authorities Version 2.2
October 2, 2020: WebTrust Principles and Criteria for Certification Authorities – SSL Baseline with Network Security – Version 2.4.1
November 14, 2019: Trust Services Principles and Criteria for Certification Authorities Version 2.1
November 11, 2019: WebTrust Principles and Criteria for Certification Authorities – SSL Baseline with Network Security – Version 2.3
November 30, 2018: Trust Services Principles and Criteria for Certification Authorities Version 2.1
November 30, 2018: WebTrust Principles and Criteria for Certification Authorities – SSL Baseline with Network Security – Version 2.3
December 15, 2017: Trust Services Principles and Criteria for Certification Authorities Version 2.0
December 15, 2017: WebTrust Principles and Criteria for Certification Authorities – SSL Baseline with Network Security – Version 2.2
December 15, 2016: Trust Services Principles and Criteria for Certification Authorities Version 2.0
December 15, 2016: WebTrust Principles and Criteria for Certification Authorities - SSL Baseline with Network Security - Version 2.0
December 15, 2015: Trust Services Principles and Criteria for Certification Authorities Version 2.0
December 15, 2015: WebTrust Principles and Criteria for Certification Authorities - SSL Baseline with Network Security - Version 2.0
September 9, 2015: Trust Service Principles and Criteria for Certification Authorities Version 2.0
September 9, 2015: WebTrust Principles and Criteria for Certification Authorities - SSL Baseline with Network Security - Version 2.0

Certificate Problem Reports

To report private key compromise, certificate misuse, or other types of fraud, compromise, misuse, inappropriate conduct, or any other matter related to certificates, please email cert-prob-reports@letsencrypt.org.