It's great to see OpenBSD Project supporting Let's Encrypt. I don't
know if you folks still configuring it, but there's some points
that I noticed:
- I don't know in modern browsers, but Links 2.12 say that the
certificate is not valid. It's just old browsers, or firefox also
have this same problem?
- The RSA is 4096 bits. If I remember correctly, reyk@ said once
that 4096 is overkill. Any specific reason to use 4096 instead of
2048?
- Do you plan to support ftp.openbsd.org? Would be great to
download packages with more security