{"id":123497,"date":"2025-04-14T15:05:08","date_gmt":"2025-04-14T13:05:08","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/maksimalnoe-vremya-zhizni-tls-sertifikatov-sokratyat-s-398-do-47-dnej"},"modified":"2025-04-14T15:05:08","modified_gmt":"2025-04-14T13:05:08","slug":"maksimalnoe-vremya-zhizni-tls-sertifikatov-sokratyat-s-398-do-47-dnej","status":"publish","type":"post","link":"https:\/\/prohoster.info\/et\/blog\/novosti-interneta\/maksimalnoe-vremya-zhizni-tls-sertifikatov-sokratyat-s-398-do-47-dnej","title":{"rendered":"TLS-sertifikaatide maksimaalne kehtivusaeg l\u00fcheneb 398 p\u00e4evalt 47 p\u00e4evale","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

CA\/Browser Forum'i liikmed, kes on brauserite ja sertifitseerimisasutuste koost\u00f6\u00f6 koordineerimise platvorm, h\u00e4\u00e4letasid TLS-sertifikaatide maksimaalse kehtivusaja l\u00fchendamise poolt. TLS-sertifikaatide maksimaalne kehtivusaeg l\u00fcheneb 398 p\u00e4evast 47 p\u00e4evani, kui CA\/Browser Forum ei muuda oma otsust. Sertifikaatide kehtivusaja k\u00f5rval otsustati oluliselt l\u00fchendada ka objekti valideerimise andmete korduskasutamise t\u00e4htaegu: SAN-i (Subject Alternative Name, kui \u00fcks sertifikaat katab mitmeid ressursse, n\u00e4iteks kehtib mitme domeeni kohta) puhul l\u00fcheneb kehtivusaeg 398 p\u00e4evast 10 p\u00e4evani, mitte-SAN-i puhul aga 825 p\u00e4evast 398 p\u00e4evani. <\/p>\n

Muudatust kavatsetakse edendada j\u00e4rk-j\u00e4rgult: alates 15. m\u00e4rtsist 2026 l\u00fchendatakse maksimaalne kehtivusaeg TLS-sertifikaadid<\/a> v\u00e4heneb 250 p\u00e4evani, alates 15. m\u00e4rtsist 2027 - 100 p\u00e4evani, ja alates m\u00e4rtsist 2029 - 47 p\u00e4evani. Iga etapi saabumisel toob uute sertifikaatide t\u00f6\u00f6tlemine, mis ei vasta nimetatud kriteeriumidele, brauserites esile vea \"ERR_CERT_VALIDITY_TOO_LONG\". Varem suutsid brauserite tootjad viia sertifikaatide kehtivusaja j\u00e4rk-j\u00e4rgult 8 aastalt 398 p\u00e4evani (13 kuud). <\/p>\n

Uue TLS-sertifikaatide kehtivusaja l\u00fchendamise poolt h\u00e4\u00e4letas 29 osalejat, 6 hoidusid ja keegi ei h\u00e4\u00e4letanud vastu. H\u00e4\u00e4letamise poolt olid: Apple, Google, Microsoft, Mozilla, Amazon, Asseco Data Systems SA (Certum), Buypass AS, Certigna (DHIMYOTIS), Certinomis, DigiCert, Disig, D-TRUST, eMudhra, Fastly, GlobalSign, GoDaddy, HARICA, iTrusChina, Izenpe, NAVER Cloud Trust Services, OISTE Foundation, Sectigo, SHECA, SSL.com, SwissSign, Telia Company, TrustAsia, VikingCloud, Visa. Hoiatuss\u00f5na v\u00e4lja h\u00e4\u00e4letanud osalejad: Entrust, IdenTrust, Japan Registry Services, SECOM Trust Systems, TWCA. <\/p>\n

Eeldatakse, et l\u00fchike kehtivusajaga sertifikaatide genereerimine v\u00f5imaldab kiiremini rakendada uusi kr\u00fcptoalgoritme, kui praegustes algoritmides leitakse haavatavusi, ja v\u00e4hendab turvaprobleeme. N\u00e4iteks aitab l\u00fchikese elueaga sertifikaatide kasutamine takistada kurjategijatel pikaajaliselt ohvri liiklust kontrollida v\u00f5i sertifikaate kalastamiseks kasutada juhul, kui sertifikaadi lekkimine toimub h\u00e4kkimise t\u00f5ttu. Sageli toimuvad valideerimisprotsessid ja sertifikaatide l\u00fchenenud kehtivusaeg v\u00e4hendavad ka t\u00f5en\u00e4osust, et sertifikaat kehtib j\u00e4tkuvalt p\u00e4rast selle teabele vastamatuse kaotamist ning v\u00e4hendab valev\u00e4lja antud sertifikaatide leviku riski. <\/p>\n

Lisaks saavad l\u00fchike kehtivusajaga sertifikaadid stiimuli automaatsete sertifikaadihalduse s\u00fcsteemide rakendamiseks, mis on vabad inimfaktorist. Kuid k\u00e4sitsi sertifikaatide uuendamise praktika kaotamine v\u00f5ib kaasa tuua ka negatiivseid tagaj\u00e4rgi. On t\u00e4heldatud, et m\u00f5ned seadmed, mis lubavad sertifikaatide allalaadimist ainult k\u00e4sitsi, v\u00f5ivad j\u00e4\u00e4da kehtetute sertifikaatidega seoses k\u00e4sitsi uuendamise keerukuse t\u00f5ttu iga pooleteise kuu tagant. See muudatus v\u00f5ib negatiivselt m\u00f5jutada ka selliste sertifitseerimiskeskuste \u00e4ri, kes ei paku automaatsete sertifikaatide saamiseks API-d.
\n
Allikas: opennet.ru<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u0423\u0447\u0430\u0441\u0442\u043d\u0438\u043a\u0438 \u0430\u0441\u0441\u043e\u0446\u0438\u0430\u0446\u0438\u0438 CA\/Browser Forum, \u044f\u0432\u043b\u044f\u044e\u0449\u0435\u0439\u0441\u044f \u043f\u043b\u043e\u0449\u0430\u0434\u043a\u043e\u0439 \u0434\u043b\u044f \u043a\u043e\u043e\u0440\u0434\u0438\u043d\u0430\u0446\u0438\u0438 \u0441\u043e\u0432\u043c\u0435\u0441\u0442\u043d\u043e\u0439 \u0440\u0430\u0431\u043e\u0442\u044b \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u0435\u0439 \u0431\u0440\u0430\u0443\u0437\u0435\u0440\u043e\u0432 \u0438 \u0443\u0434\u043e\u0441\u0442\u043e\u0432\u0435\u0440\u044f\u044e\u0449\u0438\u0445 \u0446\u0435\u043d\u0442\u0440\u043e\u0432, \u043f\u0440\u043e\u0433\u043e\u043b\u043e\u0441\u043e\u0432\u0430\u043b\u0438 \u0437\u0430 \u0441\u043e\u043a\u0440\u0430\u0449\u0435\u043d\u0438\u0435 \u043c\u0430\u043a\u0441\u0438\u043c\u0430\u043b\u044c\u043d\u043e\u0433\u043e \u0432\u0440\u0435\u043c\u0435\u043d\u0438 \u0436\u0438\u0437\u043d\u0438 TLS-\u0441\u0435\u0440\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0432. \u041c\u0430\u043a\u0441\u0438\u043c\u0430\u043b\u044c\u043d\u043e\u0435 \u0432\u0440\u0435\u043c\u044f \u0434\u0435\u0439\u0441\u0442\u0432\u0438\u044f TLS-\u0441\u0435\u0440\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0432 \u0431\u0443\u0434\u0435\u0442 \u0441\u043e\u043a\u0440\u0430\u0449\u0435\u043d\u043e \u0441 398 \u0434\u043e 47 \u0434\u043d\u0435\u0439, \u0435\u0441\u043b\u0438 \u0432 \u0434\u0430\u043b\u044c\u043d\u0435\u0439\u0448\u0435\u043c CA\/Browser Forum \u043d\u0435 \u043f\u0435\u0440\u0435\u0441\u043c\u043e\u0442\u0440\u0438\u0442 \u043f\u0440\u0438\u043d\u044f\u0442\u043e\u0435 \u0440\u0435\u0448\u0435\u043d\u0438\u0435. \u041f\u043e\u043c\u0438\u043c\u043e \u0432\u0440\u0435\u043c\u0435\u043d\u0438 \u0434\u0435\u0439\u0441\u0442\u0432\u0438\u044f \u0441\u0435\u0440\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0432 \u0440\u0435\u0448\u0435\u043d\u043e \u0437\u0430\u043c\u0435\u0442\u043d\u043e \u0441\u043e\u043a\u0440\u0430\u0442\u0438\u0442\u044c \u0438 \u0441\u0440\u043e\u043a\u0438 \u043f\u043e\u0432\u0442\u043e\u0440\u043d\u043e\u0433\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u044f \u0434\u0430\u043d\u043d\u044b\u0445 \u0432\u0430\u043b\u0438\u0434\u0430\u0446\u0438\u0438 […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-123497","post","type-post","status-publish","format-standard","hentry","category-novosti-interneta"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47TLS-sertifikaatide maksimaalne kehtivusaeg l\u00fcheneb 398 p\u00e4evalt 47 p\u00e4evale | ProHoster","description":"CA\/Browsers Forumi liikmed, kes on kohtumispaik brauseritootjate ja sertifitseerimiskeskuste koost\u00f6\u00f6 koordineerimiseks, h\u00e4\u00e4letasid TLS-sertifikaatide maksimaalse kehtivusaja l\u00fchendamise poolt. TLS-sertifikaatide maksimaalne kehtivusaeg l\u00fcheneb 398 p\u00e4evalt 47 p\u00e4evale, kui CA\/Browsers Forumi otsus ei muutu. Lisaks sertifikaatide kehtivusele otsustati oluliselt v\u00e4hendada ka valideerimisandmete uuesti kasutamise aeg.","canonical_url":"https:\/\/prohoster.info\/et\/blog\/novosti-interneta\/maksimalnoe-vremya-zhizni-tls-sertifikatov-sokratyat-s-398-do-47-dnej","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"et_EE","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u041c\u0430\u043a\u0441\u0438\u043c\u0430\u043b\u044c\u043d\u043e\u0435 \u0432\u0440\u0435\u043c\u044f \u0436\u0438\u0437\u043d\u0438 TLS-\u0441\u0435\u0440\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0432 \u0441\u043e\u043a\u0440\u0430\u0442\u044f\u0442 \u0441 398 \u0434\u043e 47 \u0434\u043d\u0435\u0439 | ProHoster","og:description":"\u0423\u0447\u0430\u0441\u0442\u043d\u0438\u043a\u0438 \u0430\u0441\u0441\u043e\u0446\u0438\u0430\u0446\u0438\u0438 CA\/Browser Forum, \u044f\u0432\u043b\u044f\u044e\u0449\u0435\u0439\u0441\u044f \u043f\u043b\u043e\u0449\u0430\u0434\u043a\u043e\u0439 \u0434\u043b\u044f \u043a\u043e\u043e\u0440\u0434\u0438\u043d\u0430\u0446\u0438\u0438 \u0441\u043e\u0432\u043c\u0435\u0441\u0442\u043d\u043e\u0439 \u0440\u0430\u0431\u043e\u0442\u044b \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u0435\u0439 \u0431\u0440\u0430\u0443\u0437\u0435\u0440\u043e\u0432 \u0438 \u0443\u0434\u043e\u0441\u0442\u043e\u0432\u0435\u0440\u044f\u044e\u0449\u0438\u0445 \u0446\u0435\u043d\u0442\u0440\u043e\u0432, \u043f\u0440\u043e\u0433\u043e\u043b\u043e\u0441\u043e\u0432\u0430\u043b\u0438 \u0437\u0430 \u0441\u043e\u043a\u0440\u0430\u0449\u0435\u043d\u0438\u0435 \u043c\u0430\u043a\u0441\u0438\u043c\u0430\u043b\u044c\u043d\u043e\u0433\u043e \u0432\u0440\u0435\u043c\u0435\u043d\u0438 \u0436\u0438\u0437\u043d\u0438 TLS-\u0441\u0435\u0440\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0432. \u041c\u0430\u043a\u0441\u0438\u043c\u0430\u043b\u044c\u043d\u043e\u0435 \u0432\u0440\u0435\u043c\u044f \u0434\u0435\u0439\u0441\u0442\u0432\u0438\u044f TLS-\u0441\u0435\u0440\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0432 \u0431\u0443\u0434\u0435\u0442 \u0441\u043e\u043a\u0440\u0430\u0449\u0435\u043d\u043e \u0441 398 \u0434\u043e 47 \u0434\u043d\u0435\u0439, \u0435\u0441\u043b\u0438 \u0432 \u0434\u0430\u043b\u044c\u043d\u0435\u0439\u0448\u0435\u043c CA\/Browser Forum \u043d\u0435 \u043f\u0435\u0440\u0435\u0441\u043c\u043e\u0442\u0440\u0438\u0442 \u043f\u0440\u0438\u043d\u044f\u0442\u043e\u0435 \u0440\u0435\u0448\u0435\u043d\u0438\u0435. \u041f\u043e\u043c\u0438\u043c\u043e \u0432\u0440\u0435\u043c\u0435\u043d\u0438 \u0434\u0435\u0439\u0441\u0442\u0432\u0438\u044f \u0441\u0435\u0440\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0432 \u0440\u0435\u0448\u0435\u043d\u043e \u0437\u0430\u043c\u0435\u0442\u043d\u043e \u0441\u043e\u043a\u0440\u0430\u0442\u0438\u0442\u044c \u0438 \u0441\u0440\u043e\u043a\u0438 \u043f\u043e\u0432\u0442\u043e\u0440\u043d\u043e\u0433\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u044f \u0434\u0430\u043d\u043d\u044b\u0445 \u0432\u0430\u043b\u0438\u0434\u0430\u0446\u0438\u0438","og:url":"https:\/\/prohoster.info\/et\/blog\/novosti-interneta\/maksimalnoe-vremya-zhizni-tls-sertifikatov-sokratyat-s-398-do-47-dnej","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2025-04-14T13:05:08+00:00","article:modified_time":"2025-04-14T13:05:08+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"123497","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":"default","schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":"2026-02-08 21:04:47","breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2026-01-23 12:12:19","updated":"2026-02-08 21:04:47","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts\/123497","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/comments?post=123497"}],"version-history":[{"count":1,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts\/123497\/revisions"}],"predecessor-version":[{"id":158146,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts\/123497\/revisions\/158146"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/media?parent=123497"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/categories?post=123497"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/tags?post=123497"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}