[GH-ISSUE #816] [Feature] Profiles Extension 支持 #557

New issue

Closed

opened 2026-03-03 01:04:17 +03:00 by kerem · 1 comment

kerem commented

2026-03-03 01:04:17 +03:00

Owner

Originally created by @imlonghao on GitHub (Jun 22, 2025).
Original GitHub issue: https://github.com/certimate-go/certimate/issues/816

功能描述 / Description

draft-aaron-acme-profiles-00: Profiles Extension

Let's Encrtpt 支持通过证书配置来实现签发三种不同的证书，classic，tlsserver，shortlived

请求动机 / Motivation

tlsserver 和 shortlived 类型的证书相比默认配置的证书大小更小，证书属性更加未来和现代化

其他 / Miscellaneous

Lego 已有支持，参考 ARI 加一个允许为空的文本框即可实现该功能

贡献 / Contribution

我乐意为此贡献 PR！ / I am interested in contributing a PR for this!

Originally created by @imlonghao on GitHub (Jun 22, 2025). Original GitHub issue: https://github.com/certimate-go/certimate/issues/816 ### 功能描述 / Description [draft-aaron-acme-profiles-00](https://datatracker.ietf.org/doc/draft-aaron-acme-profiles/): Profiles Extension Let's Encrtpt 支持通过[证书配置](https://letsencrypt.org/zh-cn/docs/profiles/)来实现签发三种不同的证书，`classic`，`tlsserver`，`shortlived` ### 请求动机 / Motivation `tlsserver` 和 `shortlived` 类型的证书相比默认配置的证书大小更小，证书属性更加未来和现代化 ### 其他 / Miscellaneous Lego 已有支持，参考 ARI 加一个允许为空的文本框即可实现该功能 ### 贡献 / Contribution - [x] 我乐意为此贡献 PR！ / I am interested in contributing a PR for this!

kerem

2026-03-03 01:04:17 +03:00

closed this issue
added the
enhancement
label

kerem commented

2026-03-03 01:04:18 +03:00

Author

Owner

@imlonghao commented on GitHub (Jun 23, 2025):

尴尬，我把这个功能实现了之后才发现 shortlived 还是内测阶段，by the end of 2025 才会 generally available （source)

但是 tlsserver 这个 profiles 还是可以用的

@imlonghao commented on GitHub (Jun 23, 2025): 尴尬，我把这个功能实现了之后才发现 `shortlived` 还是内测阶段，by the end of 2025 才会 generally available （[source](https://letsencrypt.org/2025/01/16/6-day-and-ip-certs/#timeline)) 但是 `tlsserver` 这个 profiles 还是可以用的 ![Image](https://github.com/user-attachments/assets/8e182428-4513-4d37-ae83-c7640caeffe8)