{"action":"created","comment":{"url":"https://api.github.com/repos/letsencrypt/website/pulls/comments/245434711","pull_request_review_id":189545385,"id":245434711,"node_id":"MDI0OlB1bGxSZXF1ZXN0UmV2aWV3Q29tbWVudDI0NTQzNDcxMQ==","diff_hunk":"@@ -0,0 +1,187 @@\n+---\n+title: Glossary\n+slug: glossary\n+top_graphic: 1\n+date: 2018-12-30\n+---\n+\n+{{< lastmod >}}\n+\n+<!--\n+Note for translators:\n+ \n+- Usage of the \"def\" macro (in other languages than English):\n+{% def \n+\tid=\"a unique id for anchor - the SAME than for english. will be prefixed by `def-`\" \n+\tname=\"The term to define (optional if english or abbr is provided)\"\n+\tabbr=\"an accronym (optional)\"\n+\tenglish=\"the english term (optional - if present the abbr is in english too)\" %}}\n+\t\tthe definition\n+{% /def %}\n+\t\n+- Check the javascript console for errors.\n+\n+- Automatic titles on definition's link cuts everything after the last point (to remove source links)\n+\n+-->\n+\n+{{% def id=\"AIA\" name=\"Authority Information Access\" abbr=\"AIA\" %}} A certificate [extension](#def-extension) used to indicate to [user agents](#def-user-agent) how to obtain information about the issuer of the [certificate](#def-leaf). It typically specifies the [OCSP](#def-OCSP) URI and the [issuer URI](#def-CAI). {{% /def %}}\n+\n+{{% def id=\"ACME\" name=\"Automatic Certificate Management Environment\" abbr=\"ACME\" %}} The protocol implemented by [Let's Encrypt](#def-LE). Software compatibles with that protocol can use it to communicate with Let's Encrypt to ask for a [certificate](#def-leaf). [ACME draft 16](https://tools.ietf.org/html/draft-ietf-acme-acme-16) - [Wikipedia](https://en.wikipedia.org/wiki/Automated_Certificate_Management_Environment) {{% /def %}}\n+\n+{{% def id=\"ACME-client\" name=\"ACME Client\" %}} A program capable of communicating with an ACME server to ask for a [certificate](#def-leaf). {{% /def %}}\n+\n+{{% def id=\"ACME-server\" name=\"ACME Server\" %}} An ACME-compatible server that can generate [certificates](#def-leaf). Let's Encrypt's software, [Boulder](boulder), is ACME-compatible, [with some divergences](https://github.com/letsencrypt/boulder/blob/master/docs/acme-divergences.md). {{% /def %}}\n+\n+{{% def id=\"boulder\" name=\"Boulder\" %}} The software implementing ACME, developed and used by [Let's Encrypt](#def-LE). [GitHub](https://github.com/letsencrypt/boulder) {{% /def %}}\n+\n+{{% def id=\"BRs\" name=\"Baseline Requirements\" abbr=\"BRs\" %}} A set of technical and policy requirements for CAs. Since all major [root programs](#def-root-program) incorporate the Baseline Requirements, CAs must abide by these requirements to be trusted by most browsers. {{% /def %}}\n+\n+{{% def id=\"CNAME\" name=\"Canonical Name record\" abbr=\"CNAME\" %}} A DNS entry which maps one domain name to another, referred to as the Canonical Name. [Wikipedia](https://en.wikipedia.org/wiki/CNAME_record) {{% /def %}}\n+\n+{{% def id=\"CA\" name=\"Certificate Authority\" abbr=\"CA\" %}} An organization that issues [certificates](#def-leaf). [Let's Encrypt](#def-LE) and [IdenTrust](#def-IdenTrust) are Certificate Authorities. [Wikipedia](https://en.wikipedia.org/wiki/Certificate_authority) {{% /def %}}\n+\n+{{% def id=\"CAA\" name=\"Certificate Authority Authorization\" abbr=\"CAA\" %}} A DNS record that allows specifying which [CAs](#def-CA) are allowed to issue certificate for the corresponding domain. [Let's Encrypt](#def-LE) does check and respects CAA records. https://letsencrypt.org/docs/caa/ - [Wikipedia](https://en.wikipedia.org/wiki/DNS_Certification_Authority_Authorization) {{% /def %}}\n+\n+{{% def id=\"CAB\" name=\"Certification Authority/Browser Forum\" %}} Also known as CA/Browser Forum, is a voluntary consortium of certification authorities, vendors of Internet browser software, operating systems, and other PKI-enabled applications. This forum creates rules governing the issuance of certificates. [Let's Encrypt](#def-LE) is a member of the CA/Browser Forum. [Wikipedia](https://en.wikipedia.org/wiki/CA/Browser_Forum) {{% /def %}}\n+\n+{{% def id=\"CAI\" name=\"Certificate Authority Issuer\" abbr=\"CAI\" %}} Information about the issuer of the [certificate](#def-leaf). It may be useful when the [web server](#def-web-server) didn't provide a trusted [certificate chain](#def-chain). {{% /def %}}\n+\n+{{% def id=\"certificate\" name=\"Certificate\" %}} A file in a [particular format](#def-X509) that contains a public key and other data describing when to use that public key. The most common kind of certificate is a [leaf certificate](#def-leaf). There are also [intermediate](#def-intermediate) and [root](#def-root) certificates. {{% /def %}}\n+\n+{{% def id=\"CA\" name=\"Certificate Authority\" abbr=\"CA\" %}} An organization that issues [certificates](#def-leaf). [Let's Encrypt](#def-LE), Sectigo, and DigiCert are Certificate Authorities. [Wikipedia](https://en.wikipedia.org/wiki/Certificate_authority) {{% /def %}}\n+\n+{{% def id=\"CAA\" name=\"Certificate Authority Authorization\" abbr=\"CAA\" %}} A DNS record that specifies which [CAs](#def-CA) are allowed to issue certificate for the corresponding domain. CAA records are checked by CAs, not by browsers. [Let's Encrypt](#def-LE) [honors CAA records](https://letsencrypt.org/docs/caa/) as required by the [Baseline Requirements](#def-BRs). - [Wikipedia](https://en.wikipedia.org/wiki/DNS_Certification_Authority_Authorization) {{% /def %}}\n+\n+{{% def id=\"CABF\" name=\"CA/Browser Forum\" %}} A voluntary consortium of certification authorities, vendors of Internet browser software, operating systems, and other PKI-enabled applications. The CA/Browser Forum publishes the [Baseline Requirements](#def-BRs). [Let's Encrypt](#def-LE) is a member of the CA/Browser Forum. [Wikipedia](https://en.wikipedia.org/wiki/CA/Browser_Forum) {{% /def %}}\n+\n+{{% def id=\"chain\" name=\"Certificate chain\" %}} A list of [intermediate certificates](#def-intermediate) that help a [user agent](#def-user-agent) determine that it can trust an end-entity or [leaf certificate](#def-leaf), by connecting it to a [root certificate](#def-root) in its [certificate store](#def-store). Note: the path is not always unique, and when a website presents a certificate chain leading to one root, the user agent may decide to use another chain, ending in another root, to validate the certificate (This is especially important for Public Key Pinning). [Wikipedia](https://en.wikipedia.org/wiki/Public_key_certificate) {{% /def %}}\n+\n+{{% def id=\"CP\" name=\"Certificate Policy\" abbr=\"CP\" %}} A named set of rules that indicates the applicability of a certificate to a particular community and/or class of applications with common security requirements. [ISRG Certificate Policy](https://letsencrypt.org/repository/#isrg-certificate-policy) - [RFC 3647](https://tools.ietf.org/html/rfc3647) - [Wikipedia](https://en.wikipedia.org/wiki/Certificate_policy) {{% /def %}}\n+\n+{{% def id=\"CPS\" name=\"Certification Practice Statement\" abbr=\"CPS\" %}} A statement of the practices that a certification authority employs in issuing, managing, revoking, and renewing or re-keying certificates. [ISRG Certification Practice Statement](https://letsencrypt.org/repository/#isrg-certification-practice-statement) - [RFC 3647 section 3.4](https://tools.ietf.org/html/rfc3647#section-3.4) [Wikipedia](https://en.wikipedia.org/wiki/Certification_Practice_Statement) {{% /def %}}\n+\n+{{% def id=\"critical\" name=\"Critical\" %}} A certificate may contain [extensions](#def-extension) marked \"critical.\" This means that software must reject that certificate unless the software understands how to process that extension. This makes it possible to introduce new extensions that are important for security without creating risks for older software. {{% /def %}}\n+\n+{{% def id=\"CRL\" name=\"Certificate Revocation List\" abbr=\"CRL\" %}} A method to inform [user agents](#def-user-agent) about the [revocation](#def-revocation) status of a [certificate](#def-leaf). This is a list of the serial numbers of all revoked certificates from a given CA, signed by that CA. [Wikipedia](https://en.wikipedia.org/wiki/Certificate_revocation_list) {{% /def %}}\n+\n+{{% def id=\"CSR\" name=\"Certificate Signing Request\" abbr=\"CSR\" %}} A signed file containing the needed information required by the [CA](#def-CA) to generated a certificate. Relevant information for [Let's Encrypt](#def-LE) are the [Common Name](#def-CN), [Subject Alternative Names](#def-SAN), and Subject Public Key Info. Usually, [client applications](#def-ACME-client) automatically generate the CSR for the user, although a web hosting provider or device might also generate a CSR. [Wikipedia](https://en.wikipedia.org/wiki/Certificate_signing_request) {{% /def %}}\n+\n+{{% def id=\"store\" name=\"Certificate Store\" %}} A certificate store contains a list of trusted [roots](#def-root). Operating systems (such as Windows, Android or Debian) and [web browsers](#def-web-browser) (such as Firefox) maintain a certificate store. Browsers without one rely on the operating systems' certificate store. [Certificates](#def-leaf) provided by [Let's Encrypt](#def-LE) are [trusted by most certificates stores](https://letsencrypt.org/certificates/). {{% /def %}}\n+\n+{{% def id=\"CT\" name=\"Certificate Transparency\" abbr=\"CT\" %}} To improve security, certificates (or [precertificates](#def-precertificate)) must be published in Certificate Transparency Logs: https://www.certificate-transparency.org/. [Let's Encrypt](#def-LE) generates and publishes [precertificates](#def-precertificate), and includes in the subsequent [certificate](#def-leaf) a list of [SCTs](#def-SCT) for the precertificate. Some [browsers](#def-web-browser), such as Google Chrome, require the presence of this proof in order to validate the certificate. [Wikipedia](https://en.wikipedia.org/wiki/Certificate_Transparency) {{% /def %}}\n+\n+{{% def id=\"CT-log\" name=\"Certificate Transparency Log\" %}} A component of [Certificate Transparency](#def-CT) that accepts submissions of certificates and [precertificates](#def-precertificate) and incorporates them into a permanent, publicly accessible list. {{% /def %}}\n+\n+{{% def id=\"CN\" name=\"Common Name\" abbr=\"CN\" %}} Part of a certificate's [Subject](#def-Subject) describing what the certificate is about. For [roots](#def-root) and [intermediates](#def-intermediate) it's the human-readable name of the [certificate authority](#def-CA). For [leaf certificate](#def-leaf) it's one of the domain names on the certificate. Note: The common name is limited to 63 characters. It is an obsolete method of indicating a domain name to which the certificate applies, since current Internet standards expect software to check only the [Subject Alternative Names](#def-SAN) in order to determine the applicability of a certificate. {{% /def %}}\n+\n+{{% def id=\"cross-signing\" name=\"Cross Signing\" %}} An issuing certificate may be signed by more than one [root](#def-root). For example, [Let's Encrypt](#def-LE) [intermediates](intermediate) are cross signed by [IdenTrust](#def-IdenTrust), because at launch the Let's Encrypt root was not yet trusted by [certificate stores](#def-store). Technically, it's achieved with two issuing certificates, using the same [Subject](#def-Subject) and the same [Key-pair](#def-Key-pair), one signed by the private key of a Let's Encrypt root and the other signed by the private key of an IdenTrust's root: https://letsencrypt.org/certificates/. [Wikipedia](https://en.wikipedia.org/wiki/X.509#Certificate_chains_and_cross-certification) {{% /def %}}\n+\n+{{% def id=\"DANE\" name=\"DNS-based Authentication of Named Entities\" abbr=\"DANE\" %}} A mechanism using DNS to indicate how to verify the authenticity of the [certificate](#def-leaf) or encryption key presented.  [Wikipedia](https://en.wikipedia.org/wiki/DNS-based_Authentication_of_Named_Entities) {{% /def %}}\n+\n+{{% def id=\"DNSSEC\" name=\"Domain Name System Security Extensions\" abbr=\"DNSSEC\" %}} A mechanism to cryptographically authenticate DNS responses. DNSSEC requires deployment by TLDs, domain owners, and recursive resolvers in order to take effect. Adoption is currently somewhat low. [Wikipedia](https://en.wikipedia.org/wiki/Domain_Name_System_Security_Extensions) {{% /def %}}\n+\n+{{% def id=\"DV\" name=\"Domain-validated certificate\" %}} A [certificate](#def-leaf) where the applicant has only proven its control over the domain (and not the identity of the requesting organization. [Let's Encrypt](#def-LE) offers only DV certificates (not [OV](#def-OV) nor [EV](#def-EV)): [FAQ](https://letsencrypt.org/docs/faq/) - [Wikipedia](https://en.wikipedia.org/wiki/Domain-validated_certificate) {{% /def %}}\n+\n+{{% def id=\"Ed25519\" name=\"Ed25519\" %}} A specific type of [EdDSA](#def-EdDSA), along with Ed448. {{% /def %}}\n+\n+{{% def id=\"EdDSA\" name=\"Edwards-curve Digital Signature Algorithm\" abbr=\"EdDSA\" %}}  A modern public-key signature system based on elliptic curves, designed to solve several common [implementation issues](https://ed25519.cr.yp.to/) with elliptic curve cryptography. Certificate Authorities in the [Web PKI](#def-web-pki), like [Let's Encrypt](#def-LE), can't provide EdDSA certificates yet. [Wikipedia](https://en.wikipedia.org/wiki/EdDSA) {{% /def %}}\n+\n+{{% def id=\"ECC\" name=\"Elliptic Curve Cryptography\" abbr=\"ECC\" %}} An type of public-key cryptography based on elliptic curves. ECC uses smaller keys compared to non-EC cryptography while providing equivalent security. [Cloudflare](https://blog.cloudflare.com/a-relatively-easy-to-understand-primer-on-elliptic-curve-cryptography/) [Wikipedia](https://en.wikipedia.org/wiki/Elliptic-curve_cryptography) {{% /def %}}\n+\n+{{% def id=\"ECDSA\" name=\"Elliptic Curve Digital Signature Algorithm \" abbr=\"ECDSA\" %}} A variant of the Digital Signature Algorithm (DSA) which uses elliptic curve cryptography.  [Wikipedia](https://en.wikipedia.org/wiki/Elliptic_Curve_Digital_Signature_Algorithm). [Let's Encrypt](#def-LE) supports ECDSA for [end-entity or leaf certificates](#def-leaf), but not yet for the entire [chain](#def-chain): https://letsencrypt.org/upcoming-features/ {{% /def %}}\n+\n+{{% def id=\"EV\" name=\"Extended Validation\" abbr=\"EV\" %}} A type of certificate validation for which the [CA](#def-CA) has verified the legal entity controlling the website. They contain information about that entity. Controls from the [CA](#def-CA) are more strict than for [OV](#def-OV) certificates. [Let's Encrypt](#def-LE) doesn't offer EV certificates. [Wikipedia](https://en.wikipedia.org/wiki/Extended_Validation_Certificate) {{% /def %}}\n+\n+{{% def id=\"extension\" name=\"Extension\" %}} In certificates, most fields are defined by extensions. For instance, [Subject Alternative Names] and [AIA](#def-AIA) are extensions. The extension mechanism allows creating new fields that were not part of the original [X.509](#def-X509) standard. {{% /def %}}\n+\n+{{% def id=\"FQDN\" name=\"Fully qualified domain name\" abbr=\"FQDN\" %}} The complete domain name of a website. For example, `www.example.com` is a *FQDN*. {{% /def %}}\n+\n+{{% def id=\"IdenTrust\" name=\"IdenTrust\" %}} A [Certificate Authority](#def-CA). IdenTrust has [cross-signed](#def-cross-signing) [Let's Encrypt](#def-LE) [intermediate cerificates](#def-intermediate): [https://letsencrypt.org/certificates/](https://letsencrypt.org/certificates/). [Wikipedia](https://en.wikipedia.org/wiki/IdenTrust) {{% /def %}}\n+\n+{{% def id=\"intermediate\" name=\"Intermediate certificate\" %}} A certificate signed by a [root](#def-root) or another intermediate, and capable of signing other certificates. They are used to sign leaf certificates while keeping the private key of root certificate offline. Intermediates are included in [certificate chains](#def-chain). [Wikipedia](https://en.wikipedia.org/wiki/Public_key_certificate#Types_of_certificate) {{% /def %}}\n+\n+{{% def id=\"IDNA\" name=\"Internationalized Domain Names for Applications\" abbr=\"IDNA\" %}} See [internationalized domain name](#def-IDN). {{% /def %}}\n+\n+{{% def id=\"IDN\" name=\"Internationalized Domain Name\" abbr=\"IDN\" %}} Domain name with characters others than `a` to `z`, `0` to `9` and the hyphen (`-`). They can for example contain Arabic, Chinese, Cyrillic, Tamil, Hebrew or Latin alphabet-based characters with diacritics or ligatures. The encoded representation of an IDN domains starts with `xn--`. IDNs are supported by [Let's Encrypt](#def-LE): https://letsencrypt.org/2016/10/21/introducing-idn-support.html. [Wikipedia](https://en.wikipedia.org/wiki/Internationalized_domain_name) [RFC 5890](https://tools.ietf.org/html/rfc5890) - [RFC 5891](https://tools.ietf.org/html/rfc5891) {{% /def %}}\n+\n+{{% def id=\"ISRG\" name=\"Internet Security Research Group\" abbr=\"ISRG\" %}} The organization behind [Let's Encrypt](#def-LE): https://www.abetterinternet.org/about/. [Wikipedia](https://en.wikipedia.org/wiki/Internet_Security_Research_Group) {{% /def %}}\n+\n+{{% def id=\"Issuer\" name=\"Issuer\" %}} A certificate field describing which certificate signed the current one. For instance, the Issuer field of a Let's Encrypt end-entity certificate might be \"Issuer: C = US, O = Let's Encrypt, CN = Let's Encrypt Authority X3\". It commonly contains fields like [Common Name](#def-CN), Country, and Organization. The Issuer field always matches some certificate's [Subject](#def-Subject) field. For [self-signed](#def-self-signed) certificates like [roots](#def-root), the Issuer is the same as the Subject. The term \"issuer\" may also be used to indicate a certificate that issues other certificates (an [intermediate](#def-intermediate) or root), or an organization that issues certificates.{{% /def %}}\n+\n+{{% def id=\"Key-pair\" name=\"Key-pair\" %}} A combination of a private key and public key used to sign or encrypt. The public key is commonly embedded in a certificate, while the private key is stored on its own and should be kept secret. A key pair can be used to encrypt and decrypt, to sign and verify data, or to negotiate secondary keys, depending on the application. [Wikipedia](https://en.wikipedia.org/wiki/Public-key_cryptography) {{% /def %}}\n+\n+{{% def id=\"leaf\" name=\"Leaf certificate (end-entity certificate)\" %}} Most commonly, a certificate signed by an [intermediate](#def-intermediate), valid for a set of domains and not able to sign other certificates. This is the type of certificate that [ACME clients](#def-ACME-client) request, and that [web servers](#def-web-server) use. [Wikipedia](https://en.wikipedia.org/wiki/Public_key_certificate#End-entity_or_leaf_certificate) {{% /def %}}\n+\n+{{% def id=\"LE\" name=\"Let's Encrypt\" abbr=\"LE\" %}} The [Certificate Authority](#def-CA) controlled by [ISRG](#def-ISRG). [Wikipedia](https://en.wikipedia.org/wiki/Let%27s_Encrypt) {{% /def %}}\n+\n+{{% def id=\"mixed-content\" name=\"Mixed content\" %}} When an HTTPS webpage loads sub-resources (Javascript, CSS or images) over HTTP. [Browsers](#def-web-browser) may block mixed content, or mark the page as less secure when mixed content is present: https://developer.mozilla.org/en-US/docs/Web/Security/Mixed_content. To fix a mixed content problem, a web developer must change their pages so all resources use HTTPS URLs. [Developer tools](https://developer.mozilla.org/en-US/docs/Learn/Common_questions/What_are_browser_developer_tools) built into browsers can be used to find out which resources are causing mixed content problems. {{% /def %}}\n+\n+{{% def id=\"OCSP-must-staple\" name=\"OCSP Must-Staple\" %}} A [certificate](#def-leaf) extension, informing the [browser](#def-web-browser) that the [web server](#def-web-server) with that certificate must use [OCSP stapling](#def-OCSP-staping). It's used to require that an up-to-date [revocation](#def-revocation) status of the [certificate](#def-leaf) is confirmed by the web server on every connection, making revocation more reliable. [Let's Encrypt](#def-LE) can issue certificates with the OCSP Must-Staple [extension](#def-extension) upon request. [Mozilla Security Blog](https://blog.mozilla.org/security/2015/11/23/improving-revocation-ocsp-must-staple-and-short-lived-certificates/) [RFC 7633](https://tools.ietf.org/html/rfc7633) {{% /def %}}\n+\n+{{% def id=\"OCSP-stapling\" name=\"OCSP stapling\" %}} A way for a [web server](#def-web-server) to send a [browser](#def-web-browser) an [OCSP](#def-OCSP) response signed by the [Certificate Authority](#def-CA), so the browser itself doesn’t need to make a secondary OCSP request to the CA, improving speed and privacy. Also known as TLS Certificate Status Request extension. [Wikipedia](https://en.wikipedia.org/wiki/OCSP_stapling) [Cloudflare](https://blog.cloudflare.com/high-reliability-ocsp-stapling/) {{% /def %}}\n+\n+{{% def id=\"OID\" name=\"Object identifiers\" abbr=\"OID\" %}} Unique numeric identifiers standardized by the International Telecommunications Union (ITU) and ISO/IEC. OIDs are used within certificates to define extensions, fields, or policy assertions. Internet standards and [Certificate Policy](#def-CP) and [Certification Practice Statement](#def-CPS) documents define OID usage in the [Web PKI](#def-web-pki). [Wikipedia](https://en.wikipedia.org/wiki/Object_identifier) {{% /def %}}\n+\n+{{% def id=\"OCSP\" name=\"Online Certificate Status Protocol\" abbr=\"OCSP\" %}} A method to check the [revocation](#def-revocation) status of a [certificate](#def-leaf). In other words, a way to check whether a [Certificate Authority](#def-CA) indicates that the certificate should no longer be considered valid, even though its expiration date has not yet been reached. This request can create privacy problems because it allows the certificate authority, and Internet service providers, to directly observe who is visiting which sites. [Wikipedia](https://en.wikipedia.org/wiki/Online_Certificate_Status_Protocol) {{% /def %}}\n+\n+{{% def id=\"OV\" name=\"Organization Validation\" abbr=\"OV\" %}} Certificates for which the [CA](#def-CA) has verified the legal entity of the [Subscriber](#def-subscriber). They contain information about that entity. [Let's Encrypt](#def-LE) doesn't offer OV certificates. [Wikipedia](https://en.wikipedia.org/wiki/Public_key_certificate#Organization_validation) {{% /def %}}\n+\n+{{% def id=\"pem\" name=\"PEM file (.pem)\" %}}  A format for cryptographic information (originally specified as part of the Privacy Enhanced Mail Internet standards for secure email). A PEM document can represent information such as a private key, a public key, or a digital certificate. These files start with \"-\\-\\-\\--BEGIN \" and then a data type. [Wikipedia](https://en.wikipedia.org/wiki/Privacy-Enhanced_Mail) {{% /def %}}\n+\n+{{% def id=\"pfx\" name=\"Personal Information Exchange Files (.pfx)\" %}} A file that may contain a [leaf certificate](#def-leaf), its [chain](#def-chain) up to the root and the private key of the leaf. See also https://en.wikipedia.org/wiki/PKCS_12. [Microsoft Hardware Dev Center](https://docs.microsoft.com/en-us/windows-hardware/drivers/install/personal-information-exchange---pfx--files) {{% /def %}}\n+\n+{{% def id=\"precertificate\" name=\"Precertificate\" %}} Precertificates are a part of [Certificate Transparency](#def-CT). A precertificate is a copy of the [certificate](#def-leaf) that a CA intends to issue, with a [critical](#def-critical) poison extension added to prevent the precertificate from being accepted by software in the wild. A CA submits a precertificate to [CT logs] in exchange for [SCTs](#def-SCT). Since a precertificate is not identical to its corresponding certificate, Certificate Transparency logs may end up containing both. [RFC 6962 Section 3.1]( https://tools.ietf.org/html/rfc6962#section-3.1) {{% /def %}}\n+\n+{{% def id=\"HPKP\" name=\"HTTP Public Key Pinning\" abbr=\"HPKP\" %}} A security mechanism that asks a browser to require that a site's [certificate chain](#def-chain) use certain public keys on future loads. Chrome introduced this mechanism to protect against CA compromises, but it caused site outages, leading Chrome to [deprecate and remove it](https://groups.google.com/a/chromium.org/forum/#!topic/blink-dev/he9tr7p3rZ8). [Wikipedia](https://en.wikipedia.org/wiki/HTTP_Public_Key_Pinning) {{% /def %}}\n+\n+{{% def id=\"PSL\" name=\"Public Suffix List\" abbr=\"PSL\" %}} A list of *Public Suffixes* maintained by Mozilla, indicating which Internet domains are available for many separate entities to register subdomains. For instance, the list indicates that both `com` and `co.uk` are Public Suffixes even though `co.uk` is not a TLD. Web browsers use the list, among other things, for preventing sites that are likely operated by different entities from sharing web cookies with one another. [Let's Encrypt](#def-LE) also uses the list for rate-limit calculations: https://letsencrypt.org/docs/rate-limits/. https://publicsuffix.org/ {{% /def %}}\n+\n+{{% def id=\"relying-party\" name=\"Relying Party\" %}} The person relying on information in a certificate. For instance, someone who visits an HTTPS web site is a Relying Party. {{% /def %}}\n+\n+{{% def id=\"revocation\" name=\"Revocation\" %}} A certificate is valid until its expiration date, unless the [CA](#def-CA) says it's been revoked. The certificate may be revoked for various reasons such as the compromise of the private key. Browsers may check if a certificate is revoked using [CRL](#def-CRL), [OCSP](#def-OCSP), or newer methods like [OneCRL](https://blog.mozilla.org/security/2015/03/03/revoking-intermediate-certificates-introducing-onecrl/) and [CRLSets](https://dev.chromium.org/Home/chromium-security/crlsets). Note that in many situations, [revocation doesn't work](https://www.imperialviolet.org/2011/03/18/revocation.html). https://letsencrypt.org/docs/revoking/ {{% /def %}}\n+\n+{{% def id=\"root\" name=\"Root certificate\" %}} A [self-signed](#def-self-signed) certificate controlled by a [certificate authority](#def-CA), used to sign its [intermediates](#def-intermediate) certificates and included in [certificate stores](#def-store). [Wikipedia](https://en.wikipedia.org/wiki/Root_certificate) {{% /def %}}\n+\n+{{% def id=\"root-program\" name=\"Root Program\" %}} The policies an organization uses to decide which certificates to include in its [certificate store](#def-store), and thereforce which CAs are trusted by their software. {{% /def %}}\n+\n+{{% def id=\"RSA\" abbr=\"RSA\" %}} A public-key algorithm used for encryption and to digitally sign certificates. [Wikipedia](https://en.wikipedia.org/wiki/RSA_(cryptosystem)) {{% /def %}}\n+\n+{{% def id=\"self-signed\" name=\"Self-signed certificate\" %}} A certificate signed by its own private key, with its [Subject](#def-Subject) equal to its [Issuer](#def-Issuer). Self-signed certificates are trusted only due to prior arrangements made in the physical world, such as inclusion on a [trusted root list](#def-store). [Root certificates](#def-root) are self-signed. [Wikipedia](https://en.wikipedia.org/wiki/Self-signed_certificate) {{% /def %}}\n+\n+{{% def id=\"SNI\" name=\"Server Name Indication\" abbr=\"SNI\" %}} A field that a [user agent](#def-user-agent) sends to a [server](#def-web-server) during a [TLS](#def-TLS) handshake, specifying the domain name to connect to. This allows the server to answer with the appropriate [certificate](#def-leaf) when multiple domains are hosted behind the same IP. The web server might send a different certificate, and show different content, depending on the name that the client requested by SNI. SNI is not encrypted, but an experimental replacement, ESNI, is. [Wikipedia](https://en.wikipedia.org/wiki/Server_Name_Indication) {{% /def %}}\n+\n+{{% def id=\"SCT\" name=\"Signed Certificate Timestamp\" abbr=\"SCT\" %}} A signed promise to publish a certificate, from a [Certificate Transparency log](#def-CT-log). Browsers that enforce [CT](#def-CT) check for the presence of SCTs in a site's certificate, or in the [TLS](#def-TLS) handshake, and refuse to connect to sites that don't meet their logging requirements. This increases the likelihood that fraudulent or inaccurate certificates will be detected. https://www.certificate-transparency.org/how-ct-works {{% /def %}}\n+\n+{{% def id=\"SSL\" name=\"Secure Sockets Layer\" abbr=\"SSL\" %}} An older name for [TLS](#def-TLS), still in common use. {{% /def %}}\n+\n+{{% def id=\"staging\" name=\"Staging\" %}} [Let's Encrypt](#def-LE) provides a staging API to test certificate request without impacting rate limits. Certificates generated by the staging environment are *not* publicly trusted. The staging environment should be used for testing, debugging, and ACME client development purposes. https://letsencrypt.org/docs/staging-environment/ {{% /def %}}\n+\n+{{% def id=\"Subject\" name=\"Subject\" %}} A certificate field indicating what a certificate is about. This commonly contains fields like [Common Name](#def-CN), Country, and Organization. {{% /def %}}","path":"content/en/docs/glossary.md","position":160,"original_position":160,"commit_id":"730d40e4c70f908aa3a919f8f6374e9b353e7ec0","original_commit_id":"730d40e4c70f908aa3a919f8f6374e9b353e7ec0","user":{"login":"tdelmas","id":1955774,"node_id":"MDQ6VXNlcjE5NTU3NzQ=","avatar_url":"https://avatars0.githubusercontent.com/u/1955774?v=4","gravatar_id":"","url":"https://api.github.com/users/tdelmas","html_url":"https://github.com/tdelmas","followers_url":"https://api.github.com/users/tdelmas/followers","following_url":"https://api.github.com/users/tdelmas/following{/other_user}","gists_url":"https://api.github.com/users/tdelmas/gists{/gist_id}","starred_url":"https://api.github.com/users/tdelmas/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/tdelmas/subscriptions","organizations_url":"https://api.github.com/users/tdelmas/orgs","repos_url":"https://api.github.com/users/tdelmas/repos","events_url":"https://api.github.com/users/tdelmas/events{/privacy}","received_events_url":"https://api.github.com/users/tdelmas/received_events","type":"User","site_admin":false},"body":"\"Subject\" seams too generic for me, I think \"Certificate subject\" is better\r\n\r\n```suggestion\r\n{{% def id=\"subject\" name=\"Certificate subject\" %}} A certificate field indicating what a certificate is about. This commonly contains fields like [Common Name](#def-CN), Country, and Organization. {{% /def %}}\r\n```","created_at":"2019-01-04T22:10:58Z","updated_at":"2019-01-04T22:31:39Z","html_url":"https://github.com/letsencrypt/website/pull/415#discussion_r245434711","pull_request_url":"https://api.github.com/repos/letsencrypt/website/pulls/415","author_association":"CONTRIBUTOR","_links":{"self":{"href":"https://api.github.com/repos/letsencrypt/website/pulls/comments/245434711"},"html":{"href":"https://github.com/letsencrypt/website/pull/415#discussion_r245434711"},"pull_request":{"href":"https://api.github.com/repos/letsencrypt/website/pulls/415"}}},"pull_request":{"url":"https://api.github.com/repos/letsencrypt/website/pulls/415","id":229913719,"node_id":"MDExOlB1bGxSZXF1ZXN0MjI5OTEzNzE5","html_url":"https://github.com/letsencrypt/website/pull/415","diff_url":"https://github.com/letsencrypt/website/pull/415.diff","patch_url":"https://github.com/letsencrypt/website/pull/415.patch","issue_url":"https://api.github.com/repos/letsencrypt/website/issues/415","number":415,"state":"open","locked":false,"title":"[WIP] Glossary: Fix #380","user":{"login":"tdelmas","id":1955774,"node_id":"MDQ6VXNlcjE5NTU3NzQ=","avatar_url":"https://avatars0.githubusercontent.com/u/1955774?v=4","gravatar_id":"","url":"https://api.github.com/users/tdelmas","html_url":"https://github.com/tdelmas","followers_url":"https://api.github.com/users/tdelmas/followers","following_url":"https://api.github.com/users/tdelmas/following{/other_user}","gists_url":"https://api.github.com/users/tdelmas/gists{/gist_id}","starred_url":"https://api.github.com/users/tdelmas/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/tdelmas/subscriptions","organizations_url":"https://api.github.com/users/tdelmas/orgs","repos_url":"https://api.github.com/users/tdelmas/repos","events_url":"https://api.github.com/users/tdelmas/events{/privacy}","received_events_url":"https://api.github.com/users/tdelmas/received_events","type":"User","site_admin":false},"body":"A glossary of main terms related to Let's Encrypt and PKI\r\n\r\nAs the objective is to help people with not enough knowledge of the PKI I tried to include most terms that can be found in the Let's Encrypt website.\r\n\r\nI assumed a minimal knowledge, so terms such as DNS are not present (It may be a mistake, please tell me if you felt differently)\r\n\r\nSome terms with few relation to Let's Encrypt or PKI may be present because:\r\n- They are used in other definitions\r\n- Helps to contrast some definitions (such as \"Web server\"/\"Web client\" to contrast with \"ACME server\"/\"ACME client\")\r\n\r\nPlease tell me if you feel some terms should be removed.\r\n\r\nI may have over engineered the definition macro, but I felt it was important for accessibility (especially for screen readers, to know the language and if it's an acronym)\r\nAnd if somebody have more knowledge about accessibility please step in!\r\n\r\nTerms that could be added: JWS, API, SSL/TLS, QUIC, SPDY, TCP, UDP, DNS, HTTP, HTTP/2, HTTPS, IP, IPv4, IPv6, SSH, NPN, ALPN, CBC, GCM, AES, SHA, MD5, Forward Secrecy, hash function, Cipher Suites.\r\n\r\nSome definitions use a small extract from their Wikipedia article or are inspired by it. It's only short extract and there is a link to the Wikipedia in the end of the definition, by maybe I should add a small text in the end of the page indicating it (with full license information), or rewrite them to not be so close of the Wikipedia article?\r\n\r\nChanges other than `glossary.md`:\r\n- I had to add `beforeColon` in `config.toml` for i18n.\r\n- `glossary.css` to add an highlight on the defined word when switching from a definition to another by clicking on an internal link (useful to see when the definition starts when clicking on a word to see it's definition)\r\n- `glossary.js` to add on internal links pointing to another definition, that definition on the title (useful to see the definition of a word without having to click a word to see it's definition)\r\n- `docs/_index.md` to add the link to `glossary.md`\r\n- ` layouts/shortcodes/def.html` for the `def` [hugo shortcode](https://gohugo.io/content-management/shortcodes/)\r\n\r\nHere is the paste of the rendered text as an example:\r\n\r\n\r\n \r\n**ACME Client**: A software capable to communicate with an ACME server to ask for a [certificate](#def-leaf \"Leaf certificate (end-user certificate): A certificate signed by a trusted intermediate, valid for a set of domains.\"). \r\n**ACME Server**: An ACME-compatible server capable to generate [certificates](#def-leaf \"Leaf certificate (end-user certificate): A certificate signed by a trusted intermediate, valid for a set of domains.\"). Let’s Encrypt software, [Boudler](boudler), is ACME-compatible. [Boulder divergences from ACME](https://github.com/letsencrypt/boulder/blob/master/docs/acme-divergences.md) \r\n**Automatic Certificate Management Environment** (ACME): The protocol implemented by [Let’s Encrypt](#def-LE \"Let's Encrypt (LE): The Certificate Authority controlled by ISRG.\"). Softwares compatibles with that protocol can use it to communicate with Let’s Encrypt to ask for a [certificate](#def-leaf \"Leaf certificate (end-user certificate): A certificate signed by a trusted intermediate, valid for a set of domains.\"). [ACME draft 16](https://tools.ietf.org/html/draft-ietf-acme-acme-16) - [Wikipedia](https://en.wikipedia.org/wiki/Automated_Certificate_Management_Environment) \r\n**Boudler**: The software implementing ACME, developed and used by [Let’s Encrypt](#def-LE \"Let's Encrypt (LE): The Certificate Authority controlled by ISRG.\"). [GitHub](https://github.com/letsencrypt/boulder) ","created_at":"2018-11-10T21:12:48Z","updated_at":"2019-01-04T22:31:39Z","closed_at":null,"merged_at":null,"merge_commit_sha":"8758974f9d9d36f26237a2929258f3299e02f1a5","assignee":null,"assignees":[],"requested_reviewers":[],"requested_teams":[],"labels":[],"milestone":null,"commits_url":"https://api.github.com/repos/letsencrypt/website/pulls/415/commits","review_comments_url":"https://api.github.com/repos/letsencrypt/website/pulls/415/comments","review_comment_url":"https://api.github.com/repos/letsencrypt/website/pulls/comments{/number}","comments_url":"https://api.github.com/repos/letsencrypt/website/issues/415/comments","statuses_url":"https://api.github.com/repos/letsencrypt/website/statuses/730d40e4c70f908aa3a919f8f6374e9b353e7ec0","head":{"label":"tdelmas:glossary","ref":"glossary","sha":"730d40e4c70f908aa3a919f8f6374e9b353e7ec0","user":{"login":"tdelmas","id":1955774,"node_id":"MDQ6VXNlcjE5NTU3NzQ=","avatar_url":"https://avatars0.githubusercontent.com/u/1955774?v=4","gravatar_id":"","url":"https://api.github.com/users/tdelmas","html_url":"https://github.com/tdelmas","followers_url":"https://api.github.com/users/tdelmas/followers","following_url":"https://api.github.com/users/tdelmas/following{/other_user}","gists_url":"https://api.github.com/users/tdelmas/gists{/gist_id}","starred_url":"https://api.github.com/users/tdelmas/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/tdelmas/subscriptions","organizations_url":"https://api.github.com/users/tdelmas/orgs","repos_url":"https://api.github.com/users/tdelmas/repos","events_url":"https://api.github.com/users/tdelmas/events{/privacy}","received_events_url":"https://api.github.com/users/tdelmas/received_events","type":"User","site_admin":false},"repo":{"id":132194429,"node_id":"MDEwOlJlcG9zaXRvcnkxMzIxOTQ0Mjk=","name":"website","full_name":"tdelmas/website","private":false,"owner":{"login":"tdelmas","id":1955774,"node_id":"MDQ6VXNlcjE5NTU3NzQ=","avatar_url":"https://avatars0.githubusercontent.com/u/1955774?v=4","gravatar_id":"","url":"https://api.github.com/users/tdelmas","html_url":"https://github.com/tdelmas","followers_url":"https://api.github.com/users/tdelmas/followers","following_url":"https://api.github.com/users/tdelmas/following{/other_user}","gists_url":"https://api.github.com/users/tdelmas/gists{/gist_id}","starred_url":"https://api.github.com/users/tdelmas/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/tdelmas/subscriptions","organizations_url":"https://api.github.com/users/tdelmas/orgs","repos_url":"https://api.github.com/users/tdelmas/repos","events_url":"https://api.github.com/users/tdelmas/events{/privacy}","received_events_url":"https://api.github.com/users/tdelmas/received_events","type":"User","site_admin":false},"html_url":"https://github.com/tdelmas/website","description":"Let's Encrypt Website and Documentation","fork":true,"url":"https://api.github.com/repos/tdelmas/website","forks_url":"https://api.github.com/repos/tdelmas/website/forks","keys_url":"https://api.github.com/repos/tdelmas/website/keys{/key_id}","collaborators_url":"https://api.github.com/repos/tdelmas/website/collaborators{/collaborator}","teams_url":"https://api.github.com/repos/tdelmas/website/teams","hooks_url":"https://api.github.com/repos/tdelmas/website/hooks","issue_events_url":"https://api.github.com/repos/tdelmas/website/issues/events{/number}","events_url":"https://api.github.com/repos/tdelmas/website/events","assignees_url":"https://api.github.com/repos/tdelmas/website/assignees{/user}","branches_url":"https://api.github.com/repos/tdelmas/website/branches{/branch}","tags_url":"https://api.github.com/repos/tdelmas/website/tags","blobs_url":"https://api.github.com/repos/tdelmas/website/git/blobs{/sha}","git_tags_url":"https://api.github.com/repos/tdelmas/website/git/tags{/sha}","git_refs_url":"https://api.github.com/repos/tdelmas/website/git/refs{/sha}","trees_url":"https://api.github.com/repos/tdelmas/website/git/trees{/sha}","statuses_url":"https://api.github.com/repos/tdelmas/website/statuses/{sha}","languages_url":"https://api.github.com/repos/tdelmas/website/languages","stargazers_url":"https://api.github.com/repos/tdelmas/website/stargazers","contributors_url":"https://api.github.com/repos/tdelmas/website/contributors","subscribers_url":"https://api.github.com/repos/tdelmas/website/subscribers","subscription_url":"https://api.github.com/repos/tdelmas/website/subscription","commits_url":"https://api.github.com/repos/tdelmas/website/commits{/sha}","git_commits_url":"https://api.github.com/repos/tdelmas/website/git/commits{/sha}","comments_url":"https://api.github.com/repos/tdelmas/website/comments{/number}","issue_comment_url":"https://api.github.com/repos/tdelmas/website/issues/comments{/number}","contents_url":"https://api.github.com/repos/tdelmas/website/contents/{+path}","compare_url":"https://api.github.com/repos/tdelmas/website/compare/{base}...{head}","merges_url":"https://api.github.com/repos/tdelmas/website/merges","archive_url":"https://api.github.com/repos/tdelmas/website/{archive_format}{/ref}","downloads_url":"https://api.github.com/repos/tdelmas/website/downloads","issues_url":"https://api.github.com/repos/tdelmas/website/issues{/number}","pulls_url":"https://api.github.com/repos/tdelmas/website/pulls{/number}","milestones_url":"https://api.github.com/repos/tdelmas/website/milestones{/number}","notifications_url":"https://api.github.com/repos/tdelmas/website/notifications{?since,all,participating}","labels_url":"https://api.github.com/repos/tdelmas/website/labels{/name}","releases_url":"https://api.github.com/repos/tdelmas/website/releases{/id}","deployments_url":"https://api.github.com/repos/tdelmas/website/deployments","created_at":"2018-05-04T22:22:01Z","updated_at":"2018-12-19T18:44:46Z","pushed_at":"2019-01-03T04:10:00Z","git_url":"git://github.com/tdelmas/website.git","ssh_url":"git@github.com:tdelmas/website.git","clone_url":"https://github.com/tdelmas/website.git","svn_url":"https://github.com/tdelmas/website","homepage":"https://letsencrypt.org","size":40276,"stargazers_count":1,"watchers_count":1,"language":"HTML","has_issues":true,"has_projects":true,"has_downloads":true,"has_wiki":true,"has_pages":false,"forks_count":1,"mirror_url":null,"archived":false,"open_issues_count":1,"license":{"key":"mpl-2.0","name":"Mozilla Public License 2.0","spdx_id":"MPL-2.0","url":"https://api.github.com/licenses/mpl-2.0","node_id":"MDc6TGljZW5zZTE0"},"forks":1,"open_issues":1,"watchers":1,"default_branch":"master"}},"base":{"label":"letsencrypt:master","ref":"master","sha":"a8894aaa421e98f1c8689b177831fe9c2aa724a4","user":{"login":"letsencrypt","id":9289019,"node_id":"MDEyOk9yZ2FuaXphdGlvbjkyODkwMTk=","avatar_url":"https://avatars0.githubusercontent.com/u/9289019?v=4","gravatar_id":"","url":"https://api.github.com/users/letsencrypt","html_url":"https://github.com/letsencrypt","followers_url":"https://api.github.com/users/letsencrypt/followers","following_url":"https://api.github.com/users/letsencrypt/following{/other_user}","gists_url":"https://api.github.com/users/letsencrypt/gists{/gist_id}","starred_url":"https://api.github.com/users/letsencrypt/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/letsencrypt/subscriptions","organizations_url":"https://api.github.com/users/letsencrypt/orgs","repos_url":"https://api.github.com/users/letsencrypt/repos","events_url":"https://api.github.com/users/letsencrypt/events{/privacy}","received_events_url":"https://api.github.com/users/letsencrypt/received_events","type":"Organization","site_admin":false},"repo":{"id":62476427,"node_id":"MDEwOlJlcG9zaXRvcnk2MjQ3NjQyNw==","name":"website","full_name":"letsencrypt/website","private":false,"owner":{"login":"letsencrypt","id":9289019,"node_id":"MDEyOk9yZ2FuaXphdGlvbjkyODkwMTk=","avatar_url":"https://avatars0.githubusercontent.com/u/9289019?v=4","gravatar_id":"","url":"https://api.github.com/users/letsencrypt","html_url":"https://github.com/letsencrypt","followers_url":"https://api.github.com/users/letsencrypt/followers","following_url":"https://api.github.com/users/letsencrypt/following{/other_user}","gists_url":"https://api.github.com/users/letsencrypt/gists{/gist_id}","starred_url":"https://api.github.com/users/letsencrypt/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/letsencrypt/subscriptions","organizations_url":"https://api.github.com/users/letsencrypt/orgs","repos_url":"https://api.github.com/users/letsencrypt/repos","events_url":"https://api.github.com/users/letsencrypt/events{/privacy}","received_events_url":"https://api.github.com/users/letsencrypt/received_events","type":"Organization","site_admin":false},"html_url":"https://github.com/letsencrypt/website","description":"Let's Encrypt Website and Documentation","fork":false,"url":"https://api.github.com/repos/letsencrypt/website","forks_url":"https://api.github.com/repos/letsencrypt/website/forks","keys_url":"https://api.github.com/repos/letsencrypt/website/keys{/key_id}","collaborators_url":"https://api.github.com/repos/letsencrypt/website/collaborators{/collaborator}","teams_url":"https://api.github.com/repos/letsencrypt/website/teams","hooks_url":"https://api.github.com/repos/letsencrypt/website/hooks","issue_events_url":"https://api.github.com/repos/letsencrypt/website/issues/events{/number}","events_url":"https://api.github.com/repos/letsencrypt/website/events","assignees_url":"https://api.github.com/repos/letsencrypt/website/assignees{/user}","branches_url":"https://api.github.com/repos/letsencrypt/website/branches{/branch}","tags_url":"https://api.github.com/repos/letsencrypt/website/tags","blobs_url":"https://api.github.com/repos/letsencrypt/website/git/blobs{/sha}","git_tags_url":"https://api.github.com/repos/letsencrypt/website/git/tags{/sha}","git_refs_url":"https://api.github.com/repos/letsencrypt/website/git/refs{/sha}","trees_url":"https://api.github.com/repos/letsencrypt/website/git/trees{/sha}","statuses_url":"https://api.github.com/repos/letsencrypt/website/statuses/{sha}","languages_url":"https://api.github.com/repos/letsencrypt/website/languages","stargazers_url":"https://api.github.com/repos/letsencrypt/website/stargazers","contributors_url":"https://api.github.com/repos/letsencrypt/website/contributors","subscribers_url":"https://api.github.com/repos/letsencrypt/website/subscribers","subscription_url":"https://api.github.com/repos/letsencrypt/website/subscription","commits_url":"https://api.github.com/repos/letsencrypt/website/commits{/sha}","git_commits_url":"https://api.github.com/repos/letsencrypt/website/git/commits{/sha}","comments_url":"https://api.github.com/repos/letsencrypt/website/comments{/number}","issue_comment_url":"https://api.github.com/repos/letsencrypt/website/issues/comments{/number}","contents_url":"https://api.github.com/repos/letsencrypt/website/contents/{+path}","compare_url":"https://api.github.com/repos/letsencrypt/website/compare/{base}...{head}","merges_url":"https://api.github.com/repos/letsencrypt/website/merges","archive_url":"https://api.github.com/repos/letsencrypt/website/{archive_format}{/ref}","downloads_url":"https://api.github.com/repos/letsencrypt/website/downloads","issues_url":"https://api.github.com/repos/letsencrypt/website/issues{/number}","pulls_url":"https://api.github.com/repos/letsencrypt/website/pulls{/number}","milestones_url":"https://api.github.com/repos/letsencrypt/website/milestones{/number}","notifications_url":"https://api.github.com/repos/letsencrypt/website/notifications{?since,all,participating}","labels_url":"https://api.github.com/repos/letsencrypt/website/labels{/name}","releases_url":"https://api.github.com/repos/letsencrypt/website/releases{/id}","deployments_url":"https://api.github.com/repos/letsencrypt/website/deployments","created_at":"2016-07-03T01:28:45Z","updated_at":"2019-01-04T21:50:04Z","pushed_at":"2019-01-04T21:50:02Z","git_url":"git://github.com/letsencrypt/website.git","ssh_url":"git@github.com:letsencrypt/website.git","clone_url":"https://github.com/letsencrypt/website.git","svn_url":"https://github.com/letsencrypt/website","homepage":"https://letsencrypt.org","size":40500,"stargazers_count":274,"watchers_count":274,"language":"HTML","has_issues":true,"has_projects":true,"has_downloads":true,"has_wiki":true,"has_pages":false,"forks_count":211,"mirror_url":null,"archived":false,"open_issues_count":23,"license":{"key":"mpl-2.0","name":"Mozilla Public License 2.0","spdx_id":"MPL-2.0","url":"https://api.github.com/licenses/mpl-2.0","node_id":"MDc6TGljZW5zZTE0"},"forks":211,"open_issues":23,"watchers":274,"default_branch":"master"}},"_links":{"self":{"href":"https://api.github.com/repos/letsencrypt/website/pulls/415"},"html":{"href":"https://github.com/letsencrypt/website/pull/415"},"issue":{"href":"https://api.github.com/repos/letsencrypt/website/issues/415"},"comments":{"href":"https://api.github.com/repos/letsencrypt/website/issues/415/comments"},"review_comments":{"href":"https://api.github.com/repos/letsencrypt/website/pulls/415/comments"},"review_comment":{"href":"https://api.github.com/repos/letsencrypt/website/pulls/comments{/number}"},"commits":{"href":"https://api.github.com/repos/letsencrypt/website/pulls/415/commits"},"statuses":{"href":"https://api.github.com/repos/letsencrypt/website/statuses/730d40e4c70f908aa3a919f8f6374e9b353e7ec0"}},"author_association":"CONTRIBUTOR"}}
{"actor":{"display_login":"tdelmas"}}