Subject: [Acme] Clarification on usage of account key pair with regards to certificate issuance

From: "Peter Panburana (pepanbur)" <[email-masked]>
Date: Thu, 18 Feb 2016 21:04:44 +0000

Hello,

I was browsing through the Let's Encrypt community support forum I saw a discussion regarding the usage of an ACME account key pair and the creation of a CSR for enrollment. The replies in that thread indicated that account keys cannot be used to create that a CSR that an ACME client wishes to enroll. I would like to know if a normative statement should be included in the draft, possibly in the certificate issuance section, stating that a client MUST enroll CSRs with a private key that is different than the ACME account private key.

Thank you,

Peter