Recently, Let’s Encrypt officially announced its all-new Gen Y Root Certificate Hierarchy (Generation Y Hierarchy). This update introduces two new root certificates (ISRG Root YR and ISRG Root YE) as well as a series of new intermediate certificates. Without a deeper look, this might seem like just a routine key rotation. But in reality, this architectural adjustment profoundly reflects the dramatic changes occurring in the Web PKI (Public Key Infrastructure) industry. By analyzing this update, we can summarize five core trends for the future of HTTPS and certificate management. ...