{"id":150385,"date":"2025-12-02T23:11:56","date_gmt":"2025-12-02T21:11:56","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/lets-encrypt-umenshit-srok-dejstviya-sertifikatov-do-45-dnej"},"modified":"2025-12-02T23:11:56","modified_gmt":"2025-12-02T21:11:56","slug":"lets-encrypt-umenshit-srok-dejstviya-sertifikatov-do-45-dnej","status":"publish","type":"post","link":"https:\/\/prohoster.info\/cs\/blog\/news\/lets-encrypt-umenshit-srok-dejstviya-sertifikatov-do-45-dnej","title":{"rendered":"Let's Encrypt zkr\u00e1t\u00ed platnost certifik\u00e1t\u016f na 45 dn\u00ed","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

Neziskov\u00fd certifika\u010dn\u00ed \u00fa\u0159ad Let's Encrypt, \u0159\u00edzen\u00fd komunitou a poskytuj\u00edc\u00ed certifik\u00e1ty zdarma v\u0161em z\u00e1jemc\u016fm, ozn\u00e1mil rozhodnut\u00ed postupn\u011b zkr\u00e1tit platnost vyd\u00e1van\u00fdch TLS certifik\u00e1t\u016f z 90 na 45 dn\u00ed. Dne 10. \u00fanora 2027 bude platnost certifik\u00e1t\u016f zkr\u00e1cena na 64 dn\u00ed a 16. \u00fanora 2028 na 45 dn\u00ed. Voliteln\u00e1 mo\u017enost z\u00edsk\u00e1n\u00ed certifik\u00e1t\u016f s platnost\u00ed 45 dn\u00ed se objev\u00ed 13. kv\u011btna 2026. <\/p>\n

Sou\u010dasn\u011b bude postupn\u011b zkr\u00e1cena doba platnosti autorizace \u2013 10. \u00fanora 2027 bude zkr\u00e1cena z 30 na 10 dn\u00ed a 16. \u00fanora 2028 z 10 dn\u016f na 7 hodin. Pod dobou platnosti autorizace se rozum\u00ed \u010das po potvrzen\u00ed sv\u00fdch pr\u00e1v na dom\u00e9na<\/a>, b\u011bhem n\u011bho\u017e m\u016f\u017ee b\u00fdt certifik\u00e1t vyd\u00e1n bez nutnosti opakovan\u00fdch kontrol. Po vypr\u0161en\u00ed t\u00e9to doby je vy\u017eadov\u00e1no nov\u00e9 potvrzen\u00ed pr\u00e1v. <\/p>\n

Jako d\u016fvod zkracov\u00e1n\u00ed doby platnosti certifik\u00e1t\u016f se uv\u00e1d\u011bj\u00ed nov\u00e9 po\u017eadavky asociace CA\/Browser Forum, kter\u00fdmi se mus\u00ed \u0159\u00eddit v\u00fdrobci prohl\u00ed\u017ee\u010d\u016f a certifika\u010dn\u00ed \u00fa\u0159ady. Podobn\u00e9 zkr\u00e1cen\u00ed platnosti bude zav\u00e1d\u011bt v\u0161echny certifika\u010dn\u00ed \u00fa\u0159ady. CA\/Browser Forum stanovil kone\u010dn\u00fd term\u00edn pro dokon\u010den\u00ed implementace na b\u0159ezen 2029 a maxim\u00e1ln\u00ed dobu platnosti certifik\u00e1tu na 47 dn\u00ed. Po b\u0159eznu 2029 bude zpracov\u00e1n\u00ed v prohl\u00ed\u017ee\u010d\u00edch nov\u00fdch certifik\u00e1t\u016f, jejich\u017e platnost p\u0159esahuje 47 dn\u00ed, vyvol\u00e1vat chybu \u201eERR_CERT_VALIDITY_TOO_LONG\u201c. <\/p>\n

Mezi v\u00fdhody p\u0159echodu na kr\u00e1tkodob\u00e9 certifik\u00e1ty pat\u0159\u00ed mo\u017enost zkr\u00e1tit dobu implementace nov\u00fdch kryptografick\u00fdch algoritm\u016f v p\u0159\u00edpad\u011b zji\u0161t\u011bn\u00ed zranitelnost\u00ed v aktu\u00e1ln\u011b platn\u00fdch, a tak\u00e9 zv\u00fd\u0161en\u00ed bezpe\u010dnosti. Nap\u0159\u00edklad v p\u0159\u00edpad\u011b nen\u00e1padn\u00e9ho \u00faniku certifik\u00e1tu v d\u016fsledku hackingov\u00fdch \u00fatok\u016f zabr\u00e1n\u00ed kr\u00e1tkodob\u00e9 certifik\u00e1ty \u00fato\u010dn\u00edk\u016fm v dlouhodob\u00e9m ovl\u00e1d\u00e1n\u00ed provozu ob\u011bti nebo vyu\u017eit\u00ed certifik\u00e1t\u016f pro phishing. \u010cast\u011bj\u0161\u00ed kontrola vlastnictv\u00ed dom\u00e9ny a zkr\u00e1cen\u00ed doby platnosti certifik\u00e1t\u016f tak\u00e9 sn\u00ed\u017e\u00ed pravd\u011bpodobnost, \u017ee certifik\u00e1t z\u016fstane v platnosti po ztr\u00e1t\u011b aktu\u00e1lnosti obsa\u017een\u00fdch informac\u00ed a sn\u00ed\u017e\u00ed riziko \u0161\u00ed\u0159en\u00ed chybn\u011b vydan\u00fdch certifik\u00e1t\u016f. <\/p>\n

Vzhledem k zkracov\u00e1n\u00ed doby platnosti certifik\u00e1t\u016f Let's Encrypt doporu\u010dil u\u017eivatel\u016fm, aby neaktualizovali certifik\u00e1ty ru\u010dn\u011b, ale p\u0159e\u0161li na automatizovan\u00e9 syst\u00e9my spr\u00e1vy certifik\u00e1t\u016f. Z\u00e1rove\u0148 by se m\u011bli u\u017eivatel\u00e9, kte\u0159\u00ed ji\u017e pou\u017e\u00edvaj\u00ed automatizovan\u00e9 syst\u00e9my, ujistit, \u017ee jejich n\u00e1stroje spr\u00e1vn\u011b podporuj\u00ed certifik\u00e1ty se zkr\u00e1cenou dobou platnosti. Pro koordinaci v\u010dasn\u00e9 automatick\u00e9 obnovy certifik\u00e1t\u016f mohou administr\u00e1to\u0159i vyu\u017e\u00edt roz\u0161\u00ed\u0159en\u00ed protokolu ARI (ACME Renewal Information), kter\u00e9 umo\u017e\u0148uje z\u00edsk\u00e1vat informace o pot\u0159eb\u011b obnovy certifik\u00e1t\u016f a vyb\u00edrat optim\u00e1ln\u00ed \u010das pro aktualizaci. Tak\u00e9 m\u00e1 smysl nastavit syst\u00e9m monitorov\u00e1n\u00ed, aby se zjistilo, kdy certifik\u00e1t nebyl v\u010das obnoven. <\/p>\n

Aby usnadnili ov\u011b\u0159ov\u00e1n\u00ed vlastnick\u00fdch pr\u00e1v k dom\u00e9n\u011b, projekt Let’s Encrypt pl\u00e1nuje zav\u00e9st v roce 2026 nov\u00fd metod ov\u011b\u0159ov\u00e1n\u00ed DNS-PERSIST-01, kter\u00fd na rozd\u00edl od metod HTTP-01 a DNS-01 nevy\u017eaduje aktualizaci informac\u00ed p\u0159i ka\u017ed\u00e9m ov\u011b\u0159en\u00ed a ani p\u0159\u00edstup ACME klienta k webov\u00e9 infrastruktu\u0159e \u010di DNS serveru. V PERSIST-01 sta\u010d\u00ed jednou p\u0159idat do DNS ur\u010ditou TXT z\u00e1znam (‘_validation-persist.example.com. IN TXT («ca.example;» » accounturi=https:\/\/ca.example\/acct\/123″)’) a ACME klient bude moci prov\u00e1d\u011bt autorizaci bez aktualizace \u00fadaj\u016f v DNS.
\n
Zdroj: opennet.ru<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u041d\u0435\u043a\u043e\u043c\u043c\u0435\u0440\u0447\u0435\u0441\u043a\u0438\u0439 \u0443\u0434\u043e\u0441\u0442\u043e\u0432\u0435\u0440\u044f\u044e\u0449\u0438\u0439 \u0446\u0435\u043d\u0442\u0440 Let’s Encrypt, \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u0438\u0440\u0443\u0435\u043c\u044b\u0439 \u0441\u043e\u043e\u0431\u0449\u0435\u0441\u0442\u0432\u043e\u043c \u0438 \u043f\u0440\u0435\u0434\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u044e\u0449\u0438\u0439 \u0441\u0435\u0440\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u044b \u0431\u0435\u0437\u0432\u043e\u0437\u043c\u0435\u0437\u0434\u043d\u043e \u0432\u0441\u0435\u043c \u0436\u0435\u043b\u0430\u044e\u0449\u0438\u043c, \u043e\u0431\u044a\u044f\u0432\u0438\u043b \u043e \u0440\u0435\u0448\u0435\u043d\u0438\u0438 \u043f\u043e\u044d\u0442\u0430\u043f\u043d\u043e \u0441\u043e\u043a\u0440\u0430\u0442\u0438\u0442\u044c \u0441\u0440\u043e\u043a \u0434\u0435\u0439\u0441\u0442\u0432\u0438\u044f \u0432\u044b\u0434\u0430\u0432\u0430\u0435\u043c\u044b\u0445 TLS-\u0441\u0435\u0440\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0432 \u0441 90 \u0434\u043e 45 \u0434\u043d\u0435\u0439. 10 \u0444\u0435\u0432\u0440\u0430\u043b\u044f 2027 \u0433\u043e\u0434\u0430 \u0441\u0440\u043e\u043a \u0434\u0435\u0439\u0441\u0442\u0432\u0438\u044f \u0441\u0435\u0440\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0432 \u0431\u0443\u0434\u0435\u0442 \u0441\u043e\u043a\u0440\u0430\u0449\u0451\u043d \u0434\u043e 64 \u0434\u043d\u0435\u0439, \u0430 16 \u0444\u0435\u0432\u0440\u0430\u043b\u044f 2028 \u0433\u043e\u0434\u0430 — \u0434\u043e 45 \u0434\u043d\u0435\u0439. \u041e\u043f\u0446\u0438\u043e\u043d\u0430\u043b\u044c\u043d\u0430\u044f \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044c \u043f\u043e\u043b\u0443\u0447\u0435\u043d\u0438\u044f \u0441\u0435\u0440\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0432, \u0434\u0435\u0439\u0441\u0442\u0432\u0443\u044e\u0449\u0438\u0445 45 \u0434\u043d\u0435\u0439, […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-150385","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47Let's Encrypt zkr\u00e1t\u00ed platnost certifik\u00e1t\u016f na 45 dn\u016f | ProHoster","description":"Nekomern\u00ed certifika\u010dn\u00ed autorita Let's Encrypt, kontrolovan\u00e1 komunitou a poskytuj\u00edc\u00ed certifik\u00e1ty zdarma v\u0161em z\u00e1jemc\u016fm, ozn\u00e1mila rozhodnut\u00ed postupn\u011b zkr\u00e1tit platnost vyd\u00e1van\u00fdch TLS certifik\u00e1t\u016f na.","canonical_url":"https:\/\/prohoster.info\/cs\/blog\/news\/lets-encrypt-umenshit-srok-dejstviya-sertifikatov-do-45-dnej","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"cs_CZ","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47Let&apos;s Encrypt \u0443\u043c\u0435\u043d\u044c\u0448\u0438\u0442 \u0441\u0440\u043e\u043a \u0434\u0435\u0439\u0441\u0442\u0432\u0438\u044f \u0441\u0435\u0440\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0432 \u0434\u043e 45 \u0434\u043d\u0435\u0439 | ProHoster","og:description":"\u041d\u0435\u043a\u043e\u043c\u043c\u0435\u0440\u0447\u0435\u0441\u043a\u0438\u0439 \u0443\u0434\u043e\u0441\u0442\u043e\u0432\u0435\u0440\u044f\u044e\u0449\u0438\u0439 \u0446\u0435\u043d\u0442\u0440 Let's Encrypt, \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u0438\u0440\u0443\u0435\u043c\u044b\u0439 \u0441\u043e\u043e\u0431\u0449\u0435\u0441\u0442\u0432\u043e\u043c \u0438 \u043f\u0440\u0435\u0434\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u044e\u0449\u0438\u0439 \u0441\u0435\u0440\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u044b \u0431\u0435\u0437\u0432\u043e\u0437\u043c\u0435\u0437\u0434\u043d\u043e \u0432\u0441\u0435\u043c \u0436\u0435\u043b\u0430\u044e\u0449\u0438\u043c, \u043e\u0431\u044a\u044f\u0432\u0438\u043b \u043e \u0440\u0435\u0448\u0435\u043d\u0438\u0438 \u043f\u043e\u044d\u0442\u0430\u043f\u043d\u043e \u0441\u043e\u043a\u0440\u0430\u0442\u0438\u0442\u044c \u0441\u0440\u043e\u043a \u0434\u0435\u0439\u0441\u0442\u0432\u0438\u044f \u0432\u044b\u0434\u0430\u0432\u0430\u0435\u043c\u044b\u0445 TLS-\u0441\u0435\u0440\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0432 \u0441.","og:url":"https:\/\/prohoster.info\/cs\/blog\/news\/lets-encrypt-umenshit-srok-dejstviya-sertifikatov-do-45-dnej","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2025-12-02T21:11:56+00:00","article:modified_time":"2025-12-02T21:11:56+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"150385","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":"default","schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":"2026-03-05 11:16:40","breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2026-01-23 16:22:20","updated":"2026-03-05 11:16:40","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/posts\/150385","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/comments?post=150385"}],"version-history":[{"count":1,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/posts\/150385\/revisions"}],"predecessor-version":[{"id":163206,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/posts\/150385\/revisions\/163206"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/media?parent=150385"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/categories?post=150385"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/tags?post=150385"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}