Unless I&#x27;m mistaken they&#x27;re also fundamentally misunderstanding SSL&#x2F;TLS.<p>As far as I can tell, LE never sees your private keys. A Certificate Authority signs your <i>public</i> key, so no, the NSA can&#x27;t coerce LE to give up your private key because LE never sees it to begin with. Could the NSA coerce LE into signing one of the NSA&#x27;s public keys under your Common Name (that is, coerce them into issuing rogue certificates for &quot;national security&quot; use)? Certainly, but they could do this before, with any already existing CA.