{"id":150385,"date":"2025-12-02T23:11:56","date_gmt":"2025-12-02T21:11:56","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/lets-encrypt-umenshit-srok-dejstviya-sertifikatov-do-45-dnej"},"modified":"2025-12-02T23:11:56","modified_gmt":"2025-12-02T21:11:56","slug":"lets-encrypt-umenshit-srok-dejstviya-sertifikatov-do-45-dnej","status":"publish","type":"post","link":"https:\/\/prohoster.info\/et\/blog\/novosti-interneta\/lets-encrypt-umenshit-srok-dejstviya-sertifikatov-do-45-dnej","title":{"rendered":"Let's Encrypt l\u00fchendab sertifikaatide kehtivusaega 45 p\u00e4evani","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

Kogukondlik mittetulundus\u00fching Let’s Encrypt, mis pakub tasuta sertifikaate, teatas, et kavatseb j\u00e4rk-j\u00e4rgult v\u00e4hendada v\u00e4ljastatavate TLS-sertifikaatide kehtivusaega 90 p\u00e4evalt 45 p\u00e4evale. Alates 10. veebruarist 2027 l\u00fchendatakse sertifikaatide kehtivusaega 64 p\u00e4evani ning 16. veebruaril 2028 \u2013 45 p\u00e4evani. Valikuline v\u00f5imalus saada 45 p\u00e4eva kehtivaid sertifikaate avatakse 13. mail 2026. <\/p>\n

Samas l\u00fchendatakse j\u00e4rk-j\u00e4rgult ka autoriseerimise kehtivusaega \u2013 10. veebruaril 2027 l\u00fchendatakse see 30 p\u00e4evalt 10 p\u00e4evani ning 16. veebruaril 2028 \u2013 10 p\u00e4evast 7 tunnini. Autoriseerimise kehtivusaeg on aeg p\u00e4rast \u00f5iguste kinnitamist. domeeni<\/a>, mille jooksul sertifikaati saab v\u00e4lja anda ilma korduvate kontrollideta. P\u00e4rast selle ajavahemiku l\u00f5ppemist on vajalik uuesti \u00f5iguste kinnitamine. <\/p>\n

Sertifikaatide kehtivusaja l\u00fchendamise p\u00f5hjuseks on CA\/Browser Forumi uus n\u00f5ue, mida peavad j\u00e4rgima brauserite tootjad ja sertifitseerimiskeskused. Sarnane kehtivusaja l\u00fchendamine viiakse ellu k\u00f5igis sertifitseerimiskeskustes. CA\/Browser Forum on m\u00e4\u00e4ranud l\u00f5ppt\u00e4htaja rakendamiseks 2029. aasta m\u00e4rtsiks, samuti on sertifikaadi maksimaalne kehtivusaeg 47 p\u00e4eva. P\u00e4rast 2029. aasta m\u00e4rtsi toovad brauserites uusi sertifikaate, mille kehtivusaeg \u00fcletab 47 p\u00e4eva, kaasa vea «ERR_CERT_VALIDITY_TOO_LONG». <\/p>\n

L\u00fchiajaliste sertifikaatide kasutamise eeliste hulka kuulub v\u00f5imalus l\u00fchendada uute kr\u00fcptoalgoritmide rakendamise aega juhul, kui praegustes sertifikaatides avastatakse haavatavusi, samuti turvalisuse suurenemine. N\u00e4iteks v\u00f5ib l\u00fchiajaliste sertifikaatide korral bannerite langemise t\u00f5ttu v\u00e4hendada kurjategijate v\u00f5imet pikka aega ohvri liiklust juhtida v\u00f5i kasutada sertifikaate vahetustegevuseks. Domeeni omandi kontrollimise sagedasema kontrollimise ning sertifikaatide kehtivusaja l\u00fchendamisega v\u00e4heneb ka t\u00f5en\u00e4osus, et sertifikaat j\u00e4tkab kehtimist p\u00e4rast sisalduva teabe aegumist ning v\u00e4heneb vale v\u00e4ljastatud sertifikaatide leviku risk. <\/p>\n

Seoses Let's Encrypt sertifikaatide kehtivusaja l\u00fchendamisega soovitab ettev\u00f5te kasutajatel mitte uuendada sertifikaate k\u00e4sitsi, vaid minna \u00fcle automaatsetele sertifikaatide haldamise s\u00fcsteemidele. Samuti peavad kasutajad, kes juba kasutavad automatiseeritud s\u00fcsteeme, veenduma, et nende t\u00f6\u00f6riistad toetavad korrektselt l\u00fchendatud kehtivusajaga sertifikaate. Sertifikaatide \u00f5igeaegse automaatse uuendamise koordineerimiseks saavad administraatorid kasutada ARI (ACME Renewal Information) protokolli laiendust, mis v\u00f5imaldab saada teavet sertifikaatide uuendamise vajaduse kohta ja valida parim aeg uuendamiseks. Samuti on m\u00f5istlik seadistada j\u00e4lgimiss\u00fcsteem, et tuvastada olukordi, kus sertifikaati ei ole \u00f5igeaegselt uuendatud. <\/p>\n

Domeeni kinnitamise lihtsustamiseks kavatseb projekt Let’s Encrypt 2026. aastal juurutada uue DNS-PERSIST-01 kontrollimeetodi, mis erineb HTTP-01 ja DNS-01 meetoditest selle poolest, et see ei vaja igal kontrollimisel teabe uuendamist ega ACME-kliendi ligip\u00e4\u00e4su veebiinfrastruktuurile v\u00f5i DNS-serverile. PERSIST-01 puhul piisab, kui lisada DNS-i \u00fchekordselt kindel TXT-kirje (‘_validation-persist.example.com. IN TXT («ca.example;» » accounturi=https:\/\/ca.example\/acct\/123″)’) ning ACME-kliendil on v\u00f5imalik autoriseerimiseks andmeid DNS-is uuendada.
\n
Allikas: opennet.ru<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u041d\u0435\u043a\u043e\u043c\u043c\u0435\u0440\u0447\u0435\u0441\u043a\u0438\u0439 \u0443\u0434\u043e\u0441\u0442\u043e\u0432\u0435\u0440\u044f\u044e\u0449\u0438\u0439 \u0446\u0435\u043d\u0442\u0440 Let’s Encrypt, \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u0438\u0440\u0443\u0435\u043c\u044b\u0439 \u0441\u043e\u043e\u0431\u0449\u0435\u0441\u0442\u0432\u043e\u043c \u0438 \u043f\u0440\u0435\u0434\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u044e\u0449\u0438\u0439 \u0441\u0435\u0440\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u044b \u0431\u0435\u0437\u0432\u043e\u0437\u043c\u0435\u0437\u0434\u043d\u043e \u0432\u0441\u0435\u043c \u0436\u0435\u043b\u0430\u044e\u0449\u0438\u043c, \u043e\u0431\u044a\u044f\u0432\u0438\u043b \u043e \u0440\u0435\u0448\u0435\u043d\u0438\u0438 \u043f\u043e\u044d\u0442\u0430\u043f\u043d\u043e \u0441\u043e\u043a\u0440\u0430\u0442\u0438\u0442\u044c \u0441\u0440\u043e\u043a \u0434\u0435\u0439\u0441\u0442\u0432\u0438\u044f \u0432\u044b\u0434\u0430\u0432\u0430\u0435\u043c\u044b\u0445 TLS-\u0441\u0435\u0440\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0432 \u0441 90 \u0434\u043e 45 \u0434\u043d\u0435\u0439. 10 \u0444\u0435\u0432\u0440\u0430\u043b\u044f 2027 \u0433\u043e\u0434\u0430 \u0441\u0440\u043e\u043a \u0434\u0435\u0439\u0441\u0442\u0432\u0438\u044f \u0441\u0435\u0440\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0432 \u0431\u0443\u0434\u0435\u0442 \u0441\u043e\u043a\u0440\u0430\u0449\u0451\u043d \u0434\u043e 64 \u0434\u043d\u0435\u0439, \u0430 16 \u0444\u0435\u0432\u0440\u0430\u043b\u044f 2028 \u0433\u043e\u0434\u0430 — \u0434\u043e 45 \u0434\u043d\u0435\u0439. \u041e\u043f\u0446\u0438\u043e\u043d\u0430\u043b\u044c\u043d\u0430\u044f \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044c \u043f\u043e\u043b\u0443\u0447\u0435\u043d\u0438\u044f \u0441\u0435\u0440\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0432, \u0434\u0435\u0439\u0441\u0442\u0432\u0443\u044e\u0449\u0438\u0445 45 \u0434\u043d\u0435\u0439, […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-150385","post","type-post","status-publish","format-standard","hentry","category-novosti-interneta"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47Let's Encrypt l\u00fchendab sertifikaatide kehtivusaega 45 p\u00e4eva | ProHoster","description":"Kogukonna kontrollitud mittetulunduslik sertifitseerimiskeskus Let's Encrypt, mis pakub tasuta sertifikaate k\u00f5igile soovijatele, teatas, et plaanib j\u00e4rk-j\u00e4rgult l\u00fchendada v\u00e4ljastatud TLS-sertifikaatide kehtivusaega 90 p\u00e4evast 45 p\u00e4eva peale. Alates 10. veebruarist 2027 l\u00fchendatakse sertifikaatide kehtivusaeg 64 p\u00e4evani ning 16. veebruarist 2028 - 45 p\u00e4evani. Valikuline v\u00f5imalus saada 45 p\u00e4eva kehtivaid sertifikaate.","canonical_url":"https:\/\/prohoster.info\/et\/blog\/novosti-interneta\/lets-encrypt-umenshit-srok-dejstviya-sertifikatov-do-45-dnej","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"et_EE","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47Let&apos;s Encrypt \u0443\u043c\u0435\u043d\u044c\u0448\u0438\u0442 \u0441\u0440\u043e\u043a \u0434\u0435\u0439\u0441\u0442\u0432\u0438\u044f \u0441\u0435\u0440\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0432 \u0434\u043e 45 \u0434\u043d\u0435\u0439 | ProHoster","og:description":"\u041d\u0435\u043a\u043e\u043c\u043c\u0435\u0440\u0447\u0435\u0441\u043a\u0438\u0439 \u0443\u0434\u043e\u0441\u0442\u043e\u0432\u0435\u0440\u044f\u044e\u0449\u0438\u0439 \u0446\u0435\u043d\u0442\u0440 Let's Encrypt, \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u0438\u0440\u0443\u0435\u043c\u044b\u0439 \u0441\u043e\u043e\u0431\u0449\u0435\u0441\u0442\u0432\u043e\u043c \u0438 \u043f\u0440\u0435\u0434\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u044e\u0449\u0438\u0439 \u0441\u0435\u0440\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u044b \u0431\u0435\u0437\u0432\u043e\u0437\u043c\u0435\u0437\u0434\u043d\u043e \u0432\u0441\u0435\u043c \u0436\u0435\u043b\u0430\u044e\u0449\u0438\u043c, \u043e\u0431\u044a\u044f\u0432\u0438\u043b \u043e \u0440\u0435\u0448\u0435\u043d\u0438\u0438 \u043f\u043e\u044d\u0442\u0430\u043f\u043d\u043e \u0441\u043e\u043a\u0440\u0430\u0442\u0438\u0442\u044c \u0441\u0440\u043e\u043a \u0434\u0435\u0439\u0441\u0442\u0432\u0438\u044f \u0432\u044b\u0434\u0430\u0432\u0430\u0435\u043c\u044b\u0445 TLS-\u0441\u0435\u0440\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0432 \u0441 90 \u0434\u043e 45 \u0434\u043d\u0435\u0439. 10 \u0444\u0435\u0432\u0440\u0430\u043b\u044f 2027 \u0433\u043e\u0434\u0430 \u0441\u0440\u043e\u043a \u0434\u0435\u0439\u0441\u0442\u0432\u0438\u044f \u0441\u0435\u0440\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0432 \u0431\u0443\u0434\u0435\u0442 \u0441\u043e\u043a\u0440\u0430\u0449\u0451\u043d \u0434\u043e 64 \u0434\u043d\u0435\u0439, \u0430 16 \u0444\u0435\u0432\u0440\u0430\u043b\u044f 2028 \u0433\u043e\u0434\u0430 - \u0434\u043e 45 \u0434\u043d\u0435\u0439. \u041e\u043f\u0446\u0438\u043e\u043d\u0430\u043b\u044c\u043d\u0430\u044f \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044c \u043f\u043e\u043b\u0443\u0447\u0435\u043d\u0438\u044f \u0441\u0435\u0440\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0432, \u0434\u0435\u0439\u0441\u0442\u0432\u0443\u044e\u0449\u0438\u0445 45 \u0434\u043d\u0435\u0439,","og:url":"https:\/\/prohoster.info\/et\/blog\/novosti-interneta\/lets-encrypt-umenshit-srok-dejstviya-sertifikatov-do-45-dnej","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2025-12-02T21:11:56+00:00","article:modified_time":"2025-12-02T21:11:56+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"150385","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":"default","schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":"2026-03-05 11:16:40","breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2026-01-23 16:22:20","updated":"2026-03-05 11:16:40"},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts\/150385","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/comments?post=150385"}],"version-history":[{"count":1,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts\/150385\/revisions"}],"predecessor-version":[{"id":163206,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts\/150385\/revisions\/163206"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/media?parent=150385"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/categories?post=150385"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/tags?post=150385"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}