{"id":150385,"date":"2025-12-02T23:11:56","date_gmt":"2025-12-02T21:11:56","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/lets-encrypt-umenshit-srok-dejstviya-sertifikatov-do-45-dnej"},"modified":"2025-12-02T23:11:56","modified_gmt":"2025-12-02T21:11:56","slug":"lets-encrypt-umenshit-srok-dejstviya-sertifikatov-do-45-dnej","status":"publish","type":"post","link":"https:\/\/prohoster.info\/ro\/blog\/news\/lets-encrypt-umenshit-srok-dejstviya-sertifikatov-do-45-dnej","title":{"rendered":"Let\u2019s Encrypt va reduce durata de valabilitate a certificatelor la 45 de zile","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

Autoritatea de certificare non-profit Let’s Encrypt, controlat\u0103 de comunitate \u0219i care ofer\u0103 certificate gratuit tuturor doritorilor, a anun\u021bat decizia de a reduce treptat durata de valabilitate a certificatelor TLS emise de la 90 la 45 de zile. Pe 10 februarie 2027, valabilitatea certificatelor va fi redus\u0103 la 64 de zile, iar pe 16 februarie 2028 \u2012 la 45 de zile. Posibilitatea op\u021bional\u0103 de a ob\u021bine certificate cu valabilitate de 45 de zile va ap\u0103rea pe 13 mai 2026. <\/p>\n

\u00cen acela\u0219i timp, va fi redus treptat \u0219i perioada de autorizare \u2012 pe 10 februarie 2027 va fi redus\u0103 de la 30 la 10 zile, iar pe 16 februarie 2028 \u2012 de la 10 zile la 7 ore. Prin perioada de autorizare se \u00een\u021belege timpul dup\u0103 confirmarea dreptului de a domeniu<\/a>, \u00een care certificatul poate fi emis f\u0103r\u0103 a necesita verific\u0103ri repetate. Dup\u0103 expirarea acestei perioade, este necesar\u0103 o nou\u0103 confirmare a drepturilor. <\/p>\n

Ca motiv pentru reducerea duratei de valabilitate a certificatelor sunt invocate noile cerin\u021be ale asocia\u021biei CA\/Browser Forum, la care trebuie s\u0103 se conformeze produc\u0103torii de browsere \u0219i autorit\u0103\u021bile de certificare. O reducere similar\u0103 a duratei de valabilitate va fi implementat\u0103 de toate autorit\u0103\u021bile de certificare. CA\/Browser Forum a stabilit termenul limit\u0103 pentru finalizarea implement\u0103rii pentru martie 2029, iar durata maxim\u0103 de valabilitate a unui certificat \u2012 47 de zile. Dup\u0103 martie 2029, procesarea \u00een browsere a noilor certificate, a c\u0103ror valabilitate dep\u0103\u0219e\u0219te 47 de zile, va duce la apari\u021bia erorii \u201eERR_CERT_VALIDITY_TOO_LONG\u201d. <\/p>\n

Printre avantajele trecerii la certificate cu o valabilitate scurt\u0103 se num\u0103r\u0103 posibilitatea de a reduce timpul de implementare a noilor algoritmi criptografici \u00een caz de descoperire a vulnerabilit\u0103\u021bilor \u00een cele actuale, precum \u0219i cre\u0219terea securit\u0103\u021bii. De exemplu, \u00een cazul unei scurgeri nedetectate de certificat ca rezultat al unei bre\u0219e de securitate, certificatele cu o valabilitate scurt\u0103 vor \u00eempiedica infractorii s\u0103 controleze o perioad\u0103 \u00eendelungat\u0103 traficul victimei sau s\u0103 foloseasc\u0103 certificate pentru phishing. Verificarea mai frecvent\u0103 a de\u021binerii domeniului \u0219i reducerea timpului de valabilitate a certificatelor vor diminua, de asemenea, probabilitatea ca certificatul s\u0103 r\u0103m\u00e2n\u0103 valabil dup\u0103 ce informa\u021biile con\u021binute \u00een el devin \u00eenvechite \u0219i vor reduce riscul de emitere a certificatelor incorect eliberate. <\/p>\n

\u00cen leg\u0103tur\u0103 cu reducerea duratei de valabilitate a certificatelor, Let’s Encrypt a recomandat utilizatorilor s\u0103 nu actualizeze certificatele manual, ci s\u0103 treac\u0103 la sisteme automate de gestionare a certificatelor. De asemenea, utilizatorii care folosec deja sisteme automatizate trebuie s\u0103 se asigure c\u0103 instrumentele lor suport\u0103 corect certificatele cu durat\u0103 redus\u0103 de valabilitate. Pentru a coordona actualizarea automat\u0103 la timp a certificatelor, administratorii pot utiliza extensia protocolului ARI (ACME Renewal Information), care permite ob\u021binerea de informa\u021bii despre necesitatea actualiz\u0103rii certificatelor \u0219i alegerea celui mai adecvat moment pentru actualizare. De asemenea, este util s\u0103 se configureze un sistem de monitorizare pentru a identifica situa\u021biile \u00een care certificatul nu a fost actualizat la timp. <\/p>\n

Pentru a simplifica confirmarea drepturilor asupra domeniului, proiectul Let’s Encrypt inten\u021bioneaz\u0103 s\u0103 implementeze \u00een 2026 o nou\u0103 metod\u0103 de verificare DNS-PERSIST-01, care, spre deosebire de metodele HTTP-01 \u0219i DNS-01, nu necesit\u0103 actualizarea informa\u021biilor la fiecare verificare \u0219i disponibilitatea clientului ACME de a accesa infrastructura web sau serverul DNS. \u00cen PERSIST-01 este suficient s\u0103 se adauge o dat\u0103 \u00een DNS un anumit \u00eenregistrare TXT (‘_validation-persist.example.com. IN TXT («ca.example;» » accounturi=https:\/\/ca.example\/acct\/123″)’) \u0219i clientul ACME va putea efectua autorizarea f\u0103r\u0103 a necesita actualizarea datelor \u00een DNS.
\n
Sursa: opennet.ro<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u041d\u0435\u043a\u043e\u043c\u043c\u0435\u0440\u0447\u0435\u0441\u043a\u0438\u0439 \u0443\u0434\u043e\u0441\u0442\u043e\u0432\u0435\u0440\u044f\u044e\u0449\u0438\u0439 \u0446\u0435\u043d\u0442\u0440 Let’s Encrypt, \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u0438\u0440\u0443\u0435\u043c\u044b\u0439 \u0441\u043e\u043e\u0431\u0449\u0435\u0441\u0442\u0432\u043e\u043c \u0438 \u043f\u0440\u0435\u0434\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u044e\u0449\u0438\u0439 \u0441\u0435\u0440\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u044b \u0431\u0435\u0437\u0432\u043e\u0437\u043c\u0435\u0437\u0434\u043d\u043e \u0432\u0441\u0435\u043c \u0436\u0435\u043b\u0430\u044e\u0449\u0438\u043c, \u043e\u0431\u044a\u044f\u0432\u0438\u043b \u043e \u0440\u0435\u0448\u0435\u043d\u0438\u0438 \u043f\u043e\u044d\u0442\u0430\u043f\u043d\u043e \u0441\u043e\u043a\u0440\u0430\u0442\u0438\u0442\u044c \u0441\u0440\u043e\u043a \u0434\u0435\u0439\u0441\u0442\u0432\u0438\u044f \u0432\u044b\u0434\u0430\u0432\u0430\u0435\u043c\u044b\u0445 TLS-\u0441\u0435\u0440\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0432 \u0441 90 \u0434\u043e 45 \u0434\u043d\u0435\u0439. 10 \u0444\u0435\u0432\u0440\u0430\u043b\u044f 2027 \u0433\u043e\u0434\u0430 \u0441\u0440\u043e\u043a \u0434\u0435\u0439\u0441\u0442\u0432\u0438\u044f \u0441\u0435\u0440\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0432 \u0431\u0443\u0434\u0435\u0442 \u0441\u043e\u043a\u0440\u0430\u0449\u0451\u043d \u0434\u043e 64 \u0434\u043d\u0435\u0439, \u0430 16 \u0444\u0435\u0432\u0440\u0430\u043b\u044f 2028 \u0433\u043e\u0434\u0430 — \u0434\u043e 45 \u0434\u043d\u0435\u0439. \u041e\u043f\u0446\u0438\u043e\u043d\u0430\u043b\u044c\u043d\u0430\u044f \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044c \u043f\u043e\u043b\u0443\u0447\u0435\u043d\u0438\u044f \u0441\u0435\u0440\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0432, \u0434\u0435\u0439\u0441\u0442\u0432\u0443\u044e\u0449\u0438\u0445 45 \u0434\u043d\u0435\u0439, […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-150385","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47Let's Encrypt va reduce durata de valabilitate a certificatelor la 45 de zile | ProHoster","description":"Autoritatea de certificare nonprofit Let's Encrypt, controlat\u0103 de comunitate \u0219i oferind certificate gratuit oricui le solicit\u0103, a anun\u021bat decizia de a reduce treptat durata de valabilitate a certificatelor TLS emise.","canonical_url":"https:\/\/prohoster.info\/ro\/blog\/news\/lets-encrypt-umenshit-srok-dejstviya-sertifikatov-do-45-dnej","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"ro_RO","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47Let&apos;s Encrypt \u0443\u043c\u0435\u043d\u044c\u0448\u0438\u0442 \u0441\u0440\u043e\u043a \u0434\u0435\u0439\u0441\u0442\u0432\u0438\u044f \u0441\u0435\u0440\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0432 \u0434\u043e 45 \u0434\u043d\u0435\u0439 | ProHoster","og:description":"\u041d\u0435\u043a\u043e\u043c\u043c\u0435\u0440\u0447\u0435\u0441\u043a\u0438\u0439 \u0443\u0434\u043e\u0441\u0442\u043e\u0432\u0435\u0440\u044f\u044e\u0449\u0438\u0439 \u0446\u0435\u043d\u0442\u0440 Let's Encrypt, \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u0438\u0440\u0443\u0435\u043c\u044b\u0439 \u0441\u043e\u043e\u0431\u0449\u0435\u0441\u0442\u0432\u043e\u043c \u0438 \u043f\u0440\u0435\u0434\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u044e\u0449\u0438\u0439 \u0441\u0435\u0440\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u044b \u0431\u0435\u0437\u0432\u043e\u0437\u043c\u0435\u0437\u0434\u043d\u043e \u0432\u0441\u0435\u043c \u0436\u0435\u043b\u0430\u044e\u0449\u0438\u043c, \u043e\u0431\u044a\u044f\u0432\u0438\u043b \u043e \u0440\u0435\u0448\u0435\u043d\u0438\u0438 \u043f\u043e\u044d\u0442\u0430\u043f\u043d\u043e \u0441\u043e\u043a\u0440\u0430\u0442\u0438\u0442\u044c \u0441\u0440\u043e\u043a \u0434\u0435\u0439\u0441\u0442\u0432\u0438\u044f \u0432\u044b\u0434\u0430\u0432\u0430\u0435\u043c\u044b\u0445 TLS-\u0441\u0435\u0440\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0432 \u0441.","og:url":"https:\/\/prohoster.info\/ro\/blog\/news\/lets-encrypt-umenshit-srok-dejstviya-sertifikatov-do-45-dnej","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2025-12-02T21:11:56+00:00","article:modified_time":"2025-12-02T21:11:56+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"150385","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":"default","schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":"2026-03-05 11:16:40","breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2026-01-23 16:22:20","updated":"2026-03-05 11:16:40","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/posts\/150385","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/comments?post=150385"}],"version-history":[{"count":1,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/posts\/150385\/revisions"}],"predecessor-version":[{"id":163206,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/posts\/150385\/revisions\/163206"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/media?parent=150385"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/categories?post=150385"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/tags?post=150385"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}