{"id":150385,"date":"2025-12-02T23:11:56","date_gmt":"2025-12-02T21:11:56","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/lets-encrypt-umenshit-srok-dejstviya-sertifikatov-do-45-dnej"},"modified":"2025-12-02T23:11:56","modified_gmt":"2025-12-02T21:11:56","slug":"lets-encrypt-umenshit-srok-dejstviya-sertifikatov-do-45-dnej","status":"publish","type":"post","link":"https:\/\/prohoster.info\/et\/blog\/news\/lets-encrypt-umenshit-srok-dejstviya-sertifikatov-do-45-dnej","title":{"rendered":"Let's Encrypt v\u00e4hendab sertifikaatide kehtivusaega 45 p\u00e4evani","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

\u00dcksus Let’s Encrypt, mis on kogukonna kontrollitav mittetulunduslik sertifitseerimiskeskus ja pakub sertifikaate tasuta k\u00f5ikidele soovijatele, teatas, et plaanib samm-sammult v\u00e4hendada v\u00e4lja antud TLS-sertifikaatide kehtivusaega 90 p\u00e4evalt 45 p\u00e4evale. Alates 10. veebruarist 2027 v\u00e4heneb sertifikaatide kehtivusaeg 64 p\u00e4evani ja alates 16. veebruarist 2028 \u2014 45 p\u00e4evani. Valikuline v\u00f5imalus saada 45 p\u00e4eva kehtivusega sertifikaate avatakse 13. mail 2026. <\/p>\n

Samaaegselt v\u00e4hendatakse samm-sammult ka autoriseerimise kehtivusaega \u2014 alates 10. veebruarist 2027 l\u00fchendatakse seda 30 p\u00e4evalt 10 p\u00e4evale ja alates 16. veebruarist 2028 \u2014 10 p\u00e4evalt 7 tunnile. Autoriseerimise kehtivusperiood viitab ajale p\u00e4rast \u00f5iguste kinnitamist. domeen<\/a>, mil jooksul v\u00f5ib sertifikaat olla v\u00e4lja antud ilma korduvate kontrollide l\u00e4bimiseta. Kui see aeg m\u00f6\u00f6dub, on vajalik uue \u00f5iguste kinnitamine. <\/p>\n

Sertifikaatide kehtivuse l\u00fchendamise p\u00f5hjuseks on CA\/Browser Foreumi uued n\u00f5uded, millele peavad vastama brauseritootjad ja sertifitseerimiskeskused. Sarnane kehtivuse l\u00fchendamine rakendatakse k\u00f5ikide sertifitseerimiskeskuste poolt. CA\/Browser Forum m\u00e4\u00e4ras rakendamise l\u00f5ppt\u00e4htajaks 2029. aasta m\u00e4rtsi ning sertifikaadi maksimaalne kehtivusaeg on 47 p\u00e4eva. P\u00e4rast m\u00e4rtsi 2029. aastat toovad uute sertifikaatide, mille kehtivusaeg \u00fcletab 47 p\u00e4eva, t\u00f6\u00f6tlemine brauserites kaasa veateate \u201eERR_CERT_VALIDITY_TOO_LONG\u201d. <\/p>\n

L\u00fchiajaliste sertifikaatide kasutuselev\u00f5tu eeliste hulka kuulub uute kr\u00fcptoalgoritmide kiire juurutamine, kui praegustes avastatakse haavatavusi, ning suurem turvalisus. N\u00e4iteks, kui sertifikaat lekib m\u00e4rkamatult h\u00e4kkimise t\u00f5ttu, takistavad l\u00fchiajalised sertifikaadid kurjategijatel pikka aega ohvri liiklust kontrollida v\u00f5i sertifikaate phishing'uks kasutada. Domeeni omandi sagedasem kontroll ja sertifikaatide kehtivusperioodi l\u00fchendamine v\u00e4hendavad ka t\u00f5en\u00e4osust, et sertifikaadid j\u00e4\u00e4vad kehtima p\u00e4rast nende teabe aegumist ning v\u00e4hendavad valev\u00e4ljastatud sertifikaatide levimise riski. <\/p>\n

Seoses sertifikaatide kehtivuse l\u00fchendamisega soovitas Let’s Encrypt kasutajatel mitte uuendada sertifikaate k\u00e4sitsi, vaid \u00fcle minna automaatsetele sertifikaadihalduss\u00fcsteemidele. Samuti peavad automaatseid s\u00fcsteeme juba kasutavad kasutajad veenduma, et nende t\u00f6\u00f6riistad toetavad \u00f5igesti l\u00fchendatud kehtivusajaga sertifikaate. Sertifikaatide \u00f5igeaegse automaatse uuendamise koordineerimiseks v\u00f5ivad administraatorid kasutada protokolli ARI (ACME Renewal Information) laiendust, mis v\u00f5imaldab saada teavet sertifikaatide uuendamise vajaduse kohta ning valida optimaalse aja uuendamiseks. Samuti on m\u00f5istlik seadistada j\u00e4lgimiss\u00fcsteem, et tuvastada olukordi, kus sertifikaati ei ole \u00f5igeaegselt uuendatud. <\/p>\n

Domeeni omaniku\u00f5iguste kinnitamise lihtsustamiseks plaanib projekt Let’s Encrypt 2026. aastal rakendada uut DNS-PERSIST-01 kontrollimeetodit, mis erineb HTTP-01 ja DNS-01 meetoditest, kuna see ei n\u00f5ua teabe v\u00e4rskendamist igal kontrollimisel ega juurdep\u00e4\u00e4su ACME-klientide veebiinfrastruktuurile v\u00f5i DNS-serverile. PERSIST-01 puhul piisab, kui lisada DNS-i \u00fchekordselt kindel TXT-salvestus (‘_validation-persist.example.com. IN TXT («ca.example;» » accounturi=https:\/\/ca.example\/acct\/123″)’), ja ACME-klient saab autoriseerimist teostada ilma DNS-i andmete v\u00e4rskendamiseta.
\n
Allikas: opennet.ru<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u041d\u0435\u043a\u043e\u043c\u043c\u0435\u0440\u0447\u0435\u0441\u043a\u0438\u0439 \u0443\u0434\u043e\u0441\u0442\u043e\u0432\u0435\u0440\u044f\u044e\u0449\u0438\u0439 \u0446\u0435\u043d\u0442\u0440 Let’s Encrypt, \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u0438\u0440\u0443\u0435\u043c\u044b\u0439 \u0441\u043e\u043e\u0431\u0449\u0435\u0441\u0442\u0432\u043e\u043c \u0438 \u043f\u0440\u0435\u0434\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u044e\u0449\u0438\u0439 \u0441\u0435\u0440\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u044b \u0431\u0435\u0437\u0432\u043e\u0437\u043c\u0435\u0437\u0434\u043d\u043e \u0432\u0441\u0435\u043c \u0436\u0435\u043b\u0430\u044e\u0449\u0438\u043c, \u043e\u0431\u044a\u044f\u0432\u0438\u043b \u043e \u0440\u0435\u0448\u0435\u043d\u0438\u0438 \u043f\u043e\u044d\u0442\u0430\u043f\u043d\u043e \u0441\u043e\u043a\u0440\u0430\u0442\u0438\u0442\u044c \u0441\u0440\u043e\u043a \u0434\u0435\u0439\u0441\u0442\u0432\u0438\u044f \u0432\u044b\u0434\u0430\u0432\u0430\u0435\u043c\u044b\u0445 TLS-\u0441\u0435\u0440\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0432 \u0441 90 \u0434\u043e 45 \u0434\u043d\u0435\u0439. 10 \u0444\u0435\u0432\u0440\u0430\u043b\u044f 2027 \u0433\u043e\u0434\u0430 \u0441\u0440\u043e\u043a \u0434\u0435\u0439\u0441\u0442\u0432\u0438\u044f \u0441\u0435\u0440\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0432 \u0431\u0443\u0434\u0435\u0442 \u0441\u043e\u043a\u0440\u0430\u0449\u0451\u043d \u0434\u043e 64 \u0434\u043d\u0435\u0439, \u0430 16 \u0444\u0435\u0432\u0440\u0430\u043b\u044f 2028 \u0433\u043e\u0434\u0430 — \u0434\u043e 45 \u0434\u043d\u0435\u0439. \u041e\u043f\u0446\u0438\u043e\u043d\u0430\u043b\u044c\u043d\u0430\u044f \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044c \u043f\u043e\u043b\u0443\u0447\u0435\u043d\u0438\u044f \u0441\u0435\u0440\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0432, \u0434\u0435\u0439\u0441\u0442\u0432\u0443\u044e\u0449\u0438\u0445 45 \u0434\u043d\u0435\u0439, […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-150385","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47Let's Encrypt v\u00e4hendab sertifikaatide kehtivusaega 45 p\u00e4evani | ProHoster","description":"Kogukonna kontrollitav mittetulunduslik sertifitseerimiskeskus Let's Encrypt, mis pakub sertifikaate tasuta k\u00f5igile soovijatele, kuulutas v\u00e4lja otsuse j\u00e4rk-j\u00e4rgult l\u00fchendada v\u00e4ljastatavate TLS-sertifikaatide kehtivusaega.","canonical_url":"https:\/\/prohoster.info\/et\/blog\/news\/lets-encrypt-umenshit-srok-dejstviya-sertifikatov-do-45-dnej","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"et_EE","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47Let&apos;s Encrypt \u0443\u043c\u0435\u043d\u044c\u0448\u0438\u0442 \u0441\u0440\u043e\u043a \u0434\u0435\u0439\u0441\u0442\u0432\u0438\u044f \u0441\u0435\u0440\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0432 \u0434\u043e 45 \u0434\u043d\u0435\u0439 | ProHoster","og:description":"\u041d\u0435\u043a\u043e\u043c\u043c\u0435\u0440\u0447\u0435\u0441\u043a\u0438\u0439 \u0443\u0434\u043e\u0441\u0442\u043e\u0432\u0435\u0440\u044f\u044e\u0449\u0438\u0439 \u0446\u0435\u043d\u0442\u0440 Let's Encrypt, \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u0438\u0440\u0443\u0435\u043c\u044b\u0439 \u0441\u043e\u043e\u0431\u0449\u0435\u0441\u0442\u0432\u043e\u043c \u0438 \u043f\u0440\u0435\u0434\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u044e\u0449\u0438\u0439 \u0441\u0435\u0440\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u044b \u0431\u0435\u0437\u0432\u043e\u0437\u043c\u0435\u0437\u0434\u043d\u043e \u0432\u0441\u0435\u043c \u0436\u0435\u043b\u0430\u044e\u0449\u0438\u043c, \u043e\u0431\u044a\u044f\u0432\u0438\u043b \u043e \u0440\u0435\u0448\u0435\u043d\u0438\u0438 \u043f\u043e\u044d\u0442\u0430\u043f\u043d\u043e \u0441\u043e\u043a\u0440\u0430\u0442\u0438\u0442\u044c \u0441\u0440\u043e\u043a \u0434\u0435\u0439\u0441\u0442\u0432\u0438\u044f \u0432\u044b\u0434\u0430\u0432\u0430\u0435\u043c\u044b\u0445 TLS-\u0441\u0435\u0440\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0432 \u0441.","og:url":"https:\/\/prohoster.info\/et\/blog\/news\/lets-encrypt-umenshit-srok-dejstviya-sertifikatov-do-45-dnej","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2025-12-02T21:11:56+00:00","article:modified_time":"2025-12-02T21:11:56+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"150385","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":"default","schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":"2026-03-05 11:16:40","breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2026-01-23 16:22:20","updated":"2026-03-05 11:16:40","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts\/150385","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/comments?post=150385"}],"version-history":[{"count":1,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts\/150385\/revisions"}],"predecessor-version":[{"id":163206,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts\/150385\/revisions\/163206"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/media?parent=150385"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/categories?post=150385"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/tags?post=150385"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}