Controls
Infrastructure security
Certificates from a trusted CA, auto-renewed
In placeCriticalVerified 15 September 2026ST4S S5
What this control means
TLS certificates are issued by Let's Encrypt and renewed automatically by Vercel.
What we found
All certificates are issued by Let's Encrypt and renewed automatically by Vercel.
How we verified it
- Read the live certificate on each host: issuer Let's Encrypt, subject matches the host.
- Checked expiry dates (November to December 2026) against Vercel's automatic renewal window.
Evidence (private, draft only): kuraplan-st4s-evidence/01-infrastructure/tls/2026-09-15-openssl-certs-and-protocols.txt
Questions about this control: security@kuraplan.com