{"id":150385,"date":"2025-12-02T23:11:56","date_gmt":"2025-12-02T21:11:56","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/lets-encrypt-umenshit-srok-dejstviya-sertifikatov-do-45-dnej"},"modified":"2025-12-02T23:11:56","modified_gmt":"2025-12-02T21:11:56","slug":"lets-encrypt-umenshit-srok-dejstviya-sertifikatov-do-45-dnej","status":"publish","type":"post","link":"https:\/\/prohoster.info\/hr\/blog\/news\/lets-encrypt-umenshit-srok-dejstviya-sertifikatov-do-45-dnej","title":{"rendered":"Let's Encrypt smanjit \u0107e rok trajanja certifikata na 45 dana","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

Nekomerna certifikacijska tijela Let's Encrypt, pod upravom zajednice, koja besplatno izdaje certifikate svima zainteresiranima, najavila su odluku o postepenom smanjenju trajanja izdavanih TLS certifikata s 90 na 45 dana. 10. velja\u010de 2027. godine, trajanje certifikata \u0107e se smanjiti na 64 dana, a 16. velja\u010de 2028. godine \u2013 na 45 dana. Opcionalna mogu\u0107nost dobivanja certifikata koji vrijede 45 dana pojavit \u0107e se 13. svibnja 2026. godine. <\/p>\n

Istodobno \u0107e se postepeno smanjivati razdoblje valjanosti autorizacije \u2013 10. velja\u010de 2027. godine \u0107e se smanjiti s 30 na 10 dana, a 16. velja\u010de 2028. godine \u2013 s 10 dana na 7 sati. Pod razdobljem valjanosti autorizacije podrazumijeva se vrijeme nakon potvrde svojih prava na. domen<\/a>, tijekom kojeg se certifikat mo\u017ee izdati bez ponovnog prolaska provjera. Nakon isteka ovog vremena potrebno je novo posvjedo\u010denje prava. <\/p>\n

Kao razlog za smanjenje trajanja certifikata navode se novi zahtjevi asocijacije CA\/Browser Forum, kojima se moraju pridr\u017eavati proizvo\u0111a\u010di preglednika i certifikacijska tijela. Sli\u010dan postupak smanjenja trajanja bit \u0107e implementiran od strane svih certifikacijskih tijela. CA\/Browser Forum odredio je kona\u010dni rok za zavr\u0161etak implementacije do o\u017eujka 2029. godine, a maksimalno vrijeme valjanosti certifikata \u2013 od 47 dana. Nakon o\u017eujka 2029. godine, obrada novih certifikata u preglednicima, \u010dije trajanje prema\u0161uje 47 dana, dovest \u0107e do izbacivanja gre\u0161ke \u201eERR_CERT_VALIDITY_TOO_LONG\u201c. <\/p>\n

Me\u0111u prednostima prelaska na kratkoro\u010dne certifikate isti\u010de se mogu\u0107nost skra\u0107ivanja vremena implementacije novih kriptoalgoritama u slu\u010daju otkrivanja ranjivosti u trenutno va\u017ee\u0107im, kao i pove\u0107ana sigurnost. Na primjer, u slu\u010daju neprimjetnog curenja certifikata uslijed napada, kratkoro\u010dni certifikati \u0107e onemogu\u0107iti napada\u010dima dugotrajno kontroliranje prometa \u017ertve ili kori\u0161tenje certifikata za phishing. \u010ces\u0107a provjera vlasni\u0161tva domene i skra\u0107ivanje roka valjanosti certifikata tako\u0111er \u0107e smanjiti vjerojatnost da certifikat nastavi biti va\u017ee\u0107i nakon gubitka relevantnosti sadr\u017eanih informacija i smanjiti rizik od \u0161irenja pogre\u0161no izdanih certifikata. <\/p>\n

S obzirom na smanjenje trajanja certifikata, Let's Encrypt preporu\u010duje korisnicima da ne a\u017euriraju certifikate ru\u010dno, ve\u0107 da pre\u0111u na automatske sustave upravljanja certifikatima. Pri tome, korisnici koji ve\u0107 koriste automatizirane sustave trebaju osigurati da njihovi alati ispravno podr\u017eavaju certifikate sa smanjenim vremenom valjanosti. Za koordinaciju pravovremenog automatskog a\u017euriranja certifikata, administratori mogu koristiti pro\u0161irenje protokola ARI (ACME Renewal Information), koje omogu\u0107uje dobivanje informacija o potrebi a\u017euriranja certifikata i odabir optimalnog vremena za a\u017euriranje. Tako\u0111er je smisleno postaviti sustav nadzora za otkrivanje situacija kada certifikat nije a\u017euriran pravovremeno. <\/p>\n

Kako bi se olak\u0161alo potvr\u0111ivanje prava na domenu, projekt Let's Encrypt planira uvesti novu metodu provjere DNS-PERSIST-01 2026. godine, koja, za razliku od metoda HTTP-01 i DNS-01, ne zahtijeva a\u017euriranje informacija pri svakoj provjeri niti pristup ACME klijenta web infrastrukturi ili DNS serveru. U PERSIST-01 dovoljno je jednom dodati odre\u0111enu TXT oznaku u DNS ('_validation-persist.example.com. IN TXT (\"ca.example;\" accounturi=https:\/\/ca.example\/acct\/123)') i ACME klijent \u0107e mo\u0107i provoditi autorizaciju bez potrebe za a\u017euriranjem podataka u DNS-u.
\n
Izvor: opennet.ru<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u041d\u0435\u043a\u043e\u043c\u043c\u0435\u0440\u0447\u0435\u0441\u043a\u0438\u0439 \u0443\u0434\u043e\u0441\u0442\u043e\u0432\u0435\u0440\u044f\u044e\u0449\u0438\u0439 \u0446\u0435\u043d\u0442\u0440 Let’s Encrypt, \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u0438\u0440\u0443\u0435\u043c\u044b\u0439 \u0441\u043e\u043e\u0431\u0449\u0435\u0441\u0442\u0432\u043e\u043c \u0438 \u043f\u0440\u0435\u0434\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u044e\u0449\u0438\u0439 \u0441\u0435\u0440\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u044b \u0431\u0435\u0437\u0432\u043e\u0437\u043c\u0435\u0437\u0434\u043d\u043e \u0432\u0441\u0435\u043c \u0436\u0435\u043b\u0430\u044e\u0449\u0438\u043c, \u043e\u0431\u044a\u044f\u0432\u0438\u043b \u043e \u0440\u0435\u0448\u0435\u043d\u0438\u0438 \u043f\u043e\u044d\u0442\u0430\u043f\u043d\u043e \u0441\u043e\u043a\u0440\u0430\u0442\u0438\u0442\u044c \u0441\u0440\u043e\u043a \u0434\u0435\u0439\u0441\u0442\u0432\u0438\u044f \u0432\u044b\u0434\u0430\u0432\u0430\u0435\u043c\u044b\u0445 TLS-\u0441\u0435\u0440\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0432 \u0441 90 \u0434\u043e 45 \u0434\u043d\u0435\u0439. 10 \u0444\u0435\u0432\u0440\u0430\u043b\u044f 2027 \u0433\u043e\u0434\u0430 \u0441\u0440\u043e\u043a \u0434\u0435\u0439\u0441\u0442\u0432\u0438\u044f \u0441\u0435\u0440\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0432 \u0431\u0443\u0434\u0435\u0442 \u0441\u043e\u043a\u0440\u0430\u0449\u0451\u043d \u0434\u043e 64 \u0434\u043d\u0435\u0439, \u0430 16 \u0444\u0435\u0432\u0440\u0430\u043b\u044f 2028 \u0433\u043e\u0434\u0430 — \u0434\u043e 45 \u0434\u043d\u0435\u0439. \u041e\u043f\u0446\u0438\u043e\u043d\u0430\u043b\u044c\u043d\u0430\u044f \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044c \u043f\u043e\u043b\u0443\u0447\u0435\u043d\u0438\u044f \u0441\u0435\u0440\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0432, \u0434\u0435\u0439\u0441\u0442\u0432\u0443\u044e\u0449\u0438\u0445 45 \u0434\u043d\u0435\u0439, […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-150385","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47Let's Encrypt smanjuje rok valjanosti certifikata na 45 dana | ProHoster","description":"Nekomercijalni certifikacijski centar Let's Encrypt, koji kontrolira zajednica i besplatno pru\u017ea certifikate svima koji to \u017eele, objavio je odluku o postepenom skra\u0107ivanju roka valjanosti izdanih TLS certifikata sa.","canonical_url":"https:\/\/prohoster.info\/hr\/blog\/news\/lets-encrypt-umenshit-srok-dejstviya-sertifikatov-do-45-dnej","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"hr_HR","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47Let&apos;s Encrypt \u0443\u043c\u0435\u043d\u044c\u0448\u0438\u0442 \u0441\u0440\u043e\u043a \u0434\u0435\u0439\u0441\u0442\u0432\u0438\u044f \u0441\u0435\u0440\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0432 \u0434\u043e 45 \u0434\u043d\u0435\u0439 | ProHoster","og:description":"\u041d\u0435\u043a\u043e\u043c\u043c\u0435\u0440\u0447\u0435\u0441\u043a\u0438\u0439 \u0443\u0434\u043e\u0441\u0442\u043e\u0432\u0435\u0440\u044f\u044e\u0449\u0438\u0439 \u0446\u0435\u043d\u0442\u0440 Let's Encrypt, \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u0438\u0440\u0443\u0435\u043c\u044b\u0439 \u0441\u043e\u043e\u0431\u0449\u0435\u0441\u0442\u0432\u043e\u043c \u0438 \u043f\u0440\u0435\u0434\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u044e\u0449\u0438\u0439 \u0441\u0435\u0440\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u044b \u0431\u0435\u0437\u0432\u043e\u0437\u043c\u0435\u0437\u0434\u043d\u043e \u0432\u0441\u0435\u043c \u0436\u0435\u043b\u0430\u044e\u0449\u0438\u043c, \u043e\u0431\u044a\u044f\u0432\u0438\u043b \u043e \u0440\u0435\u0448\u0435\u043d\u0438\u0438 \u043f\u043e\u044d\u0442\u0430\u043f\u043d\u043e \u0441\u043e\u043a\u0440\u0430\u0442\u0438\u0442\u044c \u0441\u0440\u043e\u043a \u0434\u0435\u0439\u0441\u0442\u0432\u0438\u044f \u0432\u044b\u0434\u0430\u0432\u0430\u0435\u043c\u044b\u0445 TLS-\u0441\u0435\u0440\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0432 \u0441.","og:url":"https:\/\/prohoster.info\/hr\/blog\/news\/lets-encrypt-umenshit-srok-dejstviya-sertifikatov-do-45-dnej","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2025-12-02T21:11:56+00:00","article:modified_time":"2025-12-02T21:11:56+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"150385","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":"default","schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":"2026-03-05 11:16:40","breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2026-01-23 16:22:20","updated":"2026-03-05 11:16:40","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/hr\/wp-json\/wp\/v2\/posts\/150385","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/hr\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/hr\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/hr\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/hr\/wp-json\/wp\/v2\/comments?post=150385"}],"version-history":[{"count":1,"href":"https:\/\/prohoster.info\/hr\/wp-json\/wp\/v2\/posts\/150385\/revisions"}],"predecessor-version":[{"id":163206,"href":"https:\/\/prohoster.info\/hr\/wp-json\/wp\/v2\/posts\/150385\/revisions\/163206"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/hr\/wp-json\/wp\/v2\/media?parent=150385"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/hr\/wp-json\/wp\/v2\/categories?post=150385"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/hr\/wp-json\/wp\/v2\/tags?post=150385"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}