{"id":123497,"date":"2025-04-14T15:05:08","date_gmt":"2025-04-14T13:05:08","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/maksimalnoe-vremya-zhizni-tls-sertifikatov-sokratyat-s-398-do-47-dnej"},"modified":"2025-04-14T15:05:08","modified_gmt":"2025-04-14T13:05:08","slug":"maksimalnoe-vremya-zhizni-tls-sertifikatov-sokratyat-s-398-do-47-dnej","status":"publish","type":"post","link":"https:\/\/prohoster.info\/cs\/blog\/news\/maksimalnoe-vremya-zhizni-tls-sertifikatov-sokratyat-s-398-do-47-dnej","title":{"rendered":"Maxim\u00e1ln\u00ed doba \u017eivota TLS certifik\u00e1t\u016f se zkr\u00e1t\u00ed z 398 na 47 dn\u00ed","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

\u010clenov\u00e9 asociace CA\/Browser Forum, kter\u00e1 slou\u017e\u00ed jako platforma pro koordinaci spolupr\u00e1ce v\u00fdrobc\u016f prohl\u00ed\u017ee\u010d\u016f a certifika\u010dn\u00edch autorit, hlasovali pro zkr\u00e1cen\u00ed maxim\u00e1ln\u00ed doby platnosti TLS certifik\u00e1t\u016f. Maxim\u00e1ln\u00ed doba platnosti TLS certifik\u00e1t\u016f bude zkr\u00e1cena z 398 na 47 dn\u00ed, pokud asociace CA\/Browser Forum toto rozhodnut\u00ed v budoucnu nep\u0159ehodnot\u00ed. Krom\u011b doby platnosti certifik\u00e1t\u016f bylo rozhodnuto tak\u00e9 v\u00fdrazn\u011b zkr\u00e1tit lh\u016fty pro op\u011btovn\u00e9 pou\u017eit\u00ed valida\u010dn\u00edch \u00fadaj\u016f objekt\u016f: pro SAN (Subject Alternative Name, kdy jeden certifik\u00e1t pokr\u00fdv\u00e1 n\u011bkolik zdroj\u016f, nap\u0159\u00edklad plat\u00ed pro n\u011bkolik dom\u00e9n) bude doba zkr\u00e1cena z 398 na 10 dn\u00ed, a pro non-SAN \u2014 z 825 na 398 dn\u00ed. <\/p>\n

Zm\u011bnu pl\u00e1nuj\u00ed postupn\u011b propagovat: po\u010d\u00ednaje 15. b\u0159eznem 2026 maxim\u00e1ln\u00ed doba platnosti TLS certifik\u00e1t\u016f<\/a> bude zkr\u00e1cena na 250 dn\u00ed, od 15. b\u0159ezna 2027 na 100 dn\u00ed a od b\u0159ezna 2029 na 47 dn\u00ed. Po nastaven\u00ed ka\u017ed\u00e9 etapy zpracov\u00e1n\u00ed nov\u00fdch certifik\u00e1t\u016f, kter\u00e9 nevyhovuj\u00ed uveden\u00fdm kriteri\u00edm, povede k zobrazen\u00ed chyb v prohl\u00ed\u017ee\u010d\u00edch \u201eERR_CERT_VALIDITY_TOO_LONG\u201c. D\u0159\u00edve se v\u00fdrobc\u016fm prohl\u00ed\u017ee\u010d\u016f poda\u0159ilo prosadit postupn\u00e9 zkr\u00e1cen\u00ed doby platnosti certifik\u00e1t\u016f z 8 let na 398 dn\u00ed (13 m\u011bs\u00edc\u016f). <\/p>\n

Nov\u00e9 zkr\u00e1cen\u00ed doby platnosti TLS certifik\u00e1t\u016f podpo\u0159ilo 29 \u00fa\u010dastn\u00edk\u016f, 6 se zdr\u017eelo a nikdo nebyl proti. Mezi \u00fa\u010dastn\u00edky, kte\u0159\u00ed hlasovali \u201epro\u201c: Apple, Google, Microsoft, Mozilla, Amazon, Asseco Data Systems SA (Certum), Buypass AS, Certigna (DHIMYOTIS), Certinomis, DigiCert, Disig, D-TRUST, eMudhra, Fastly, GlobalSign, GoDaddy, HARICA, iTrusChina, Izenpe, NAVER Cloud Trust Services, OISTE Foundation, Sectigo, SHECA, SSL.com, SwissSign, Telia Company, TrustAsia, VikingCloud, Visa. \u00da\u010dastn\u00edci, kte\u0159\u00ed se zdr\u017eeli: Entrust, IdenTrust, Japan Registry Services, SECOM Trust Systems, TWCA. <\/p>\n

P\u0159edpokl\u00e1d\u00e1 se, \u017ee generace kr\u00e1tkodob\u00fdch certifik\u00e1t\u016f umo\u017en\u00ed rychlej\u0161\u00ed zav\u00e1d\u011bn\u00ed nov\u00fdch kryptografick\u00fdch algoritm\u016f v p\u0159\u00edpad\u011b odhalen\u00ed zranitelnost\u00ed u st\u00e1vaj\u00edc\u00edch, a tak\u00e9 sn\u00ed\u017e\u00ed bezpe\u010dnostn\u00ed hrozby. Nap\u0159\u00edklad v p\u0159\u00edpad\u011b nepozorovan\u00e9 \u00faniku certifik\u00e1tu v d\u016fsledku hackingu kr\u00e1tkodob\u00e9 certifik\u00e1ty zabr\u00e1n\u00ed \u00fato\u010dn\u00edk\u016fm dlouho kontrolovat provoz ob\u011bti nebo pou\u017e\u00edvat certifik\u00e1ty k phishingu. \u010cast\u011bj\u0161\u00ed validace a zkr\u00e1cen\u00ed platnosti certifik\u00e1t\u016f tak\u00e9 sn\u00ed\u017e\u00ed pravd\u011bpodobnost, \u017ee certifik\u00e1t z\u016fstane v platnosti po ztr\u00e1t\u011b aktu\u00e1lnosti informac\u00ed v n\u011bm obsa\u017een\u00fdch a sn\u00ed\u017e\u00ed riziko \u0161\u00ed\u0159en\u00ed nespr\u00e1vn\u011b vydan\u00fdch certifik\u00e1t\u016f. <\/p>\n

Krom\u011b toho se kr\u00e1tkodob\u00e9 certifik\u00e1ty stanou podn\u011btem k zav\u00e1d\u011bn\u00ed automatick\u00fdch syst\u00e9m\u016f spr\u00e1vy certifik\u00e1t\u016f, zbaven\u00fdch lidsk\u00e9ho faktoru. P\u0159itom vy\u0159azen\u00ed praxe ru\u010dn\u00edho obnoven\u00ed certifik\u00e1t\u016f m\u016f\u017ee m\u00edt i negativn\u00ed d\u016fsledky. Uv\u00e1d\u00ed se, \u017ee n\u011bkter\u00e1 za\u0159\u00edzen\u00ed, kter\u00e1 umo\u017e\u0148uj\u00ed na\u010d\u00edt\u00e1n\u00ed certifik\u00e1t\u016f pouze v ru\u010dn\u00edm re\u017eimu, mohou z\u016fstat s neplatn\u00fdmi certifik\u00e1ty kv\u016fli slo\u017eitosti organizace ru\u010dn\u00edho obnoven\u00ed ka\u017ed\u00e9 p\u016fl a p\u016fl m\u011bs\u00edce. Zm\u011bna m\u016f\u017ee tak\u00e9 negativn\u011b ovlivnit podnik\u00e1n\u00ed certifika\u010dn\u00edch autorit, kter\u00e9 neposkytuj\u00ed API pro automatick\u00e9 z\u00edsk\u00e1v\u00e1n\u00ed certifik\u00e1t\u016f.
\n
Zdroj: opennet.ru<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u0423\u0447\u0430\u0441\u0442\u043d\u0438\u043a\u0438 \u0430\u0441\u0441\u043e\u0446\u0438\u0430\u0446\u0438\u0438 CA\/Browser Forum, \u044f\u0432\u043b\u044f\u044e\u0449\u0435\u0439\u0441\u044f \u043f\u043b\u043e\u0449\u0430\u0434\u043a\u043e\u0439 \u0434\u043b\u044f \u043a\u043e\u043e\u0440\u0434\u0438\u043d\u0430\u0446\u0438\u0438 \u0441\u043e\u0432\u043c\u0435\u0441\u0442\u043d\u043e\u0439 \u0440\u0430\u0431\u043e\u0442\u044b \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u0435\u0439 \u0431\u0440\u0430\u0443\u0437\u0435\u0440\u043e\u0432 \u0438 \u0443\u0434\u043e\u0441\u0442\u043e\u0432\u0435\u0440\u044f\u044e\u0449\u0438\u0445 \u0446\u0435\u043d\u0442\u0440\u043e\u0432, \u043f\u0440\u043e\u0433\u043e\u043b\u043e\u0441\u043e\u0432\u0430\u043b\u0438 \u0437\u0430 \u0441\u043e\u043a\u0440\u0430\u0449\u0435\u043d\u0438\u0435 \u043c\u0430\u043a\u0441\u0438\u043c\u0430\u043b\u044c\u043d\u043e\u0433\u043e \u0432\u0440\u0435\u043c\u0435\u043d\u0438 \u0436\u0438\u0437\u043d\u0438 TLS-\u0441\u0435\u0440\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0432. \u041c\u0430\u043a\u0441\u0438\u043c\u0430\u043b\u044c\u043d\u043e\u0435 \u0432\u0440\u0435\u043c\u044f \u0434\u0435\u0439\u0441\u0442\u0432\u0438\u044f TLS-\u0441\u0435\u0440\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0432 \u0431\u0443\u0434\u0435\u0442 \u0441\u043e\u043a\u0440\u0430\u0449\u0435\u043d\u043e \u0441 398 \u0434\u043e 47 \u0434\u043d\u0435\u0439, \u0435\u0441\u043b\u0438 \u0432 \u0434\u0430\u043b\u044c\u043d\u0435\u0439\u0448\u0435\u043c CA\/Browser Forum \u043d\u0435 \u043f\u0435\u0440\u0435\u0441\u043c\u043e\u0442\u0440\u0438\u0442 \u043f\u0440\u0438\u043d\u044f\u0442\u043e\u0435 \u0440\u0435\u0448\u0435\u043d\u0438\u0435. \u041f\u043e\u043c\u0438\u043c\u043e \u0432\u0440\u0435\u043c\u0435\u043d\u0438 \u0434\u0435\u0439\u0441\u0442\u0432\u0438\u044f \u0441\u0435\u0440\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0432 \u0440\u0435\u0448\u0435\u043d\u043e \u0437\u0430\u043c\u0435\u0442\u043d\u043e \u0441\u043e\u043a\u0440\u0430\u0442\u0438\u0442\u044c \u0438 \u0441\u0440\u043e\u043a\u0438 \u043f\u043e\u0432\u0442\u043e\u0440\u043d\u043e\u0433\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u044f \u0434\u0430\u043d\u043d\u044b\u0445 \u0432\u0430\u043b\u0438\u0434\u0430\u0446\u0438\u0438 […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-123497","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47Maxim\u00e1ln\u00ed doba \u017eivotnosti TLS certifik\u00e1t\u016f bude zkr\u00e1cena z 398 na 47 dn\u00ed | ProHoster","description":"\u00da\u010dastn\u00edci asociace CA\/Browser Forum, co\u017e je platforma pro koordinaci spolupr\u00e1ce v\u00fdrobc\u016f prohl\u00ed\u017ee\u010d\u016f a certifika\u010dn\u00edch autorit, hlasovali pro zkr\u00e1cen\u00ed maxim\u00e1ln\u00ed doby \u017eivotnosti.","canonical_url":"https:\/\/prohoster.info\/cs\/blog\/news\/maksimalnoe-vremya-zhizni-tls-sertifikatov-sokratyat-s-398-do-47-dnej","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"cs_CZ","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u041c\u0430\u043a\u0441\u0438\u043c\u0430\u043b\u044c\u043d\u043e\u0435 \u0432\u0440\u0435\u043c\u044f \u0436\u0438\u0437\u043d\u0438 TLS-\u0441\u0435\u0440\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0432 \u0441\u043e\u043a\u0440\u0430\u0442\u044f\u0442 \u0441 398 \u0434\u043e 47 \u0434\u043d\u0435\u0439 | ProHoster","og:description":"\u0423\u0447\u0430\u0441\u0442\u043d\u0438\u043a\u0438 \u0430\u0441\u0441\u043e\u0446\u0438\u0430\u0446\u0438\u0438 CA\/Browser Forum, \u044f\u0432\u043b\u044f\u044e\u0449\u0435\u0439\u0441\u044f \u043f\u043b\u043e\u0449\u0430\u0434\u043a\u043e\u0439 \u0434\u043b\u044f \u043a\u043e\u043e\u0440\u0434\u0438\u043d\u0430\u0446\u0438\u0438 \u0441\u043e\u0432\u043c\u0435\u0441\u0442\u043d\u043e\u0439 \u0440\u0430\u0431\u043e\u0442\u044b \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u0435\u0439 \u0431\u0440\u0430\u0443\u0437\u0435\u0440\u043e\u0432 \u0438 \u0443\u0434\u043e\u0441\u0442\u043e\u0432\u0435\u0440\u044f\u044e\u0449\u0438\u0445 \u0446\u0435\u043d\u0442\u0440\u043e\u0432, \u043f\u0440\u043e\u0433\u043e\u043b\u043e\u0441\u043e\u0432\u0430\u043b\u0438 \u0437\u0430 \u0441\u043e\u043a\u0440\u0430\u0449\u0435\u043d\u0438\u0435 \u043c\u0430\u043a\u0441\u0438\u043c\u0430\u043b\u044c\u043d\u043e\u0433\u043e \u0432\u0440\u0435\u043c\u0435\u043d\u0438 \u0436\u0438\u0437\u043d\u0438.","og:url":"https:\/\/prohoster.info\/cs\/blog\/news\/maksimalnoe-vremya-zhizni-tls-sertifikatov-sokratyat-s-398-do-47-dnej","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2025-04-14T13:05:08+00:00","article:modified_time":"2025-04-14T13:05:08+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"123497","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":"default","schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":"2026-02-08 21:04:47","breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2026-01-23 12:12:19","updated":"2026-02-08 21:04:47","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/posts\/123497","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/comments?post=123497"}],"version-history":[{"count":1,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/posts\/123497\/revisions"}],"predecessor-version":[{"id":158146,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/posts\/123497\/revisions\/158146"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/media?parent=123497"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/categories?post=123497"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/tags?post=123497"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}