&gt; Whether or not that is Google (the company) is not really within our purview.<p>Hi Josh. This is mentioned in the third paragraph of the article, but it looks like HN didn&#x27;t read that far, so probably worth mentioning it again.<p>I didn&#x27;t mention LE specifically out of respect for the work you guys are doing, but since you&#x27;ve posted here: why wasn&#x27;t this flagged as a High Risk Certificate Request before issuing per Baseline Requirements 4.2.1?<p>Also where is the High Risk Certificate Request check available in the LE source?<p>Thanks!