{"id":150385,"date":"2025-12-02T23:11:56","date_gmt":"2025-12-02T21:11:56","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/lets-encrypt-umenshit-srok-dejstviya-sertifikatov-do-45-dnej"},"modified":"2025-12-02T23:11:56","modified_gmt":"2025-12-02T21:11:56","slug":"lets-encrypt-umenshit-srok-dejstviya-sertifikatov-do-45-dnej","status":"publish","type":"post","link":"https:\/\/prohoster.info\/sk\/blog\/news\/lets-encrypt-umenshit-srok-dejstviya-sertifikatov-do-45-dnej","title":{"rendered":"Let's Encrypt skr\u00e1ti platnos\u0165 certifik\u00e1tov na 45 dn\u00ed","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

Nekomern\u00fd certifika\u010dn\u00fd autorita Let’s Encrypt, ktor\u00e1 je spravov\u00e1na komunitou a bezplatne poskytuje certifik\u00e1ty v\u0161etk\u00fdm z\u00e1ujemcom, ozn\u00e1mila, \u017ee v r\u00e1mci pl\u00e1novan\u00e9ho zn\u00ed\u017eenia doby platnosti vyd\u00e1van\u00fdch TLS certifik\u00e1tov z 90 na 45 dn\u00ed, bude od 10. febru\u00e1ra 2027 doba platnosti certifik\u00e1tov skr\u00e1ten\u00e1 na 64 dn\u00ed a od 16. febru\u00e1ra 2028 na 45 dn\u00ed. Mo\u017enos\u0165 z\u00edskania certifik\u00e1tov platn\u00fdch 45 dn\u00ed sa objav\u00ed 13. m\u00e1ja 2026. <\/p>\n

S\u00fa\u010dasne bude postupne skr\u00e1ten\u00e1 aj doba platnosti autoriz\u00e1cie \u2014 od 10. febru\u00e1ra 2027 sa skr\u00e1ti z 30 na 10 dn\u00ed a od 16. febru\u00e1ra 2028 z 10 dn\u00ed na 7 hod\u00edn. Pod dobou platnosti autoriz\u00e1cie sa rozumie \u010das po potvrden\u00ed svojich pr\u00e1v na. dom\u00e9ny<\/a>, po\u010das ktor\u00e9ho m\u00f4\u017ee by\u0165 certifik\u00e1t vydan\u00fd bez op\u00e4tovn\u00fdch kontrol. Po uplynut\u00ed tohto \u010dasu je potrebn\u00e9 nov\u00e9 potvrdenie pr\u00e1v. <\/p>\n

Ako d\u00f4vod skr\u00e1tenia doby platnosti certifik\u00e1tov sa uv\u00e1dzaj\u00fa nov\u00e9 po\u017eiadavky asoci\u00e1cie CA\/Browser Forum, ktor\u00e9 musia dodr\u017eiava\u0165 v\u00fdrobcovia prehliada\u010dov a certifika\u010dn\u00e9 autority. Rovnako skr\u00e1tenie doby platnosti bude implementovan\u00e9 v\u0161etk\u00fdmi certifika\u010dn\u00fdmi autoritami. CA\/Browser Forum ur\u010dil kone\u010dn\u00fd term\u00edn pre implement\u00e1ciu na marec 2029, pri\u010dom maxim\u00e1lna doba platnosti certifik\u00e1tu bude 47 dn\u00ed. Po marci 2029 bude spracovanie nov\u00fdch certifik\u00e1tov v prehliada\u010doch, ktor\u00fdch doba platnosti presahuje 47 dn\u00ed, sp\u00f4sobova\u0165 chybu \u201eERR_CERT_VALIDITY_TOO_LONG\u201c. <\/p>\n

Medzi v\u00fdhody prechodu na certifik\u00e1ty s kr\u00e1tkou platnos\u0165ou patr\u00ed skr\u00e1tenie \u010dasu na zavedenie nov\u00fdch kryptografick\u00fdch algoritmov v pr\u00edpade zistenia zranite\u013enost\u00ed v aktu\u00e1lnych certifik\u00e1toch, ako aj zv\u00fd\u0161enie bezpe\u010dnosti. Napr\u00edklad v pr\u00edpade nepozorovanej \u00faniku certifik\u00e1tu v d\u00f4sledku hacku kr\u00e1tkodob\u00e9 certifik\u00e1ty zabr\u00e1nia \u00fato\u010dn\u00edkom dlhodobo kontrolova\u0165 prev\u00e1dzku obete alebo vyu\u017e\u00edva\u0165 certifik\u00e1ty na phishing. \u010castej\u0161ie overovanie vlastn\u00edctva dom\u00e9ny a skr\u00e1tenie platnosti certifik\u00e1tov tie\u017e zn\u00ed\u017eia pravdepodobnos\u0165, \u017ee certifik\u00e1t bude na\u010falej platn\u00fd po strate aktu\u00e1lnosti obsahu v \u0148om a zn\u00ed\u017eia riziko \u0161\u00edrenia nespr\u00e1vne vydan\u00fdch certifik\u00e1tov. <\/p>\n

V s\u00favislosti so skr\u00e1ten\u00edm doby platnosti certifik\u00e1tov Let’s Encrypt odporu\u010dil u\u017e\u00edvate\u013eom, aby neaktualizovali certifik\u00e1ty manu\u00e1lne, ale pre\u0161li na automatizovan\u00e9 syst\u00e9my spr\u00e1vy certifik\u00e1tov. U\u017e\u00edvatelia, ktor\u00ed u\u017e pou\u017e\u00edvaj\u00fa automatizovan\u00e9 syst\u00e9my, by sa mali uisti\u0165, \u017ee ich n\u00e1stroje spr\u00e1vne podporuj\u00fa certifik\u00e1ty so skr\u00e1tenou dobou platnosti. Na koordin\u00e1ciu v\u010dasn\u00e9ho automatick\u00e9ho aktualizovania certifik\u00e1tov m\u00f4\u017eu spr\u00e1vcovia pou\u017ei\u0165 roz\u0161\u00edrenie protokolu ARI (ACME Renewal Information), ktor\u00e9 umo\u017e\u0148uje z\u00edskava\u0165 inform\u00e1cie o potrebe aktualiz\u00e1cie certifik\u00e1tov a vybera\u0165 optim\u00e1lny \u010das na aktualiz\u00e1ciu. Tie\u017e m\u00e1 zmysel nastavi\u0165 monitoring, aby sa odhalili situ\u00e1cie, ke\u010f certifik\u00e1t nebol v\u010das aktualizovan\u00fd. <\/p>\n

Na zjednodu\u0161enie potvrdzovania pr\u00e1v na dom\u00e9nu projekt Let's Encrypt pl\u00e1nuje v roku 2026 zavies\u0165 nov\u00fa met\u00f3du overovania DNS-PERSIST-01, ktor\u00e1 na rozdiel od met\u00f3d HTTP-01 a DNS-01 nevy\u017eaduje aktualiz\u00e1ciu inform\u00e1ci\u00ed pri ka\u017edom overen\u00ed a pr\u00edstup ACME klienta k webovej infra\u0161trukt\u00fare alebo DNS serveru. V PERSIST-01 sta\u010d\u00ed raz prida\u0165 do DNS ur\u010dit\u00fd TXT z\u00e1znam ('_validation-persist.example.com. IN TXT (\"ca.example;\" accounturi=https:\/\/ca.example\/acct\/123\")) a ACME klient bude m\u00f4c\u0165 vykon\u00e1va\u0165 autoriz\u00e1ciu bez aktualiz\u00e1cie \u00fadajov v DNS.
\n
Zdroj: opennet.ru<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u041d\u0435\u043a\u043e\u043c\u043c\u0435\u0440\u0447\u0435\u0441\u043a\u0438\u0439 \u0443\u0434\u043e\u0441\u0442\u043e\u0432\u0435\u0440\u044f\u044e\u0449\u0438\u0439 \u0446\u0435\u043d\u0442\u0440 Let’s Encrypt, \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u0438\u0440\u0443\u0435\u043c\u044b\u0439 \u0441\u043e\u043e\u0431\u0449\u0435\u0441\u0442\u0432\u043e\u043c \u0438 \u043f\u0440\u0435\u0434\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u044e\u0449\u0438\u0439 \u0441\u0435\u0440\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u044b \u0431\u0435\u0437\u0432\u043e\u0437\u043c\u0435\u0437\u0434\u043d\u043e \u0432\u0441\u0435\u043c \u0436\u0435\u043b\u0430\u044e\u0449\u0438\u043c, \u043e\u0431\u044a\u044f\u0432\u0438\u043b \u043e \u0440\u0435\u0448\u0435\u043d\u0438\u0438 \u043f\u043e\u044d\u0442\u0430\u043f\u043d\u043e \u0441\u043e\u043a\u0440\u0430\u0442\u0438\u0442\u044c \u0441\u0440\u043e\u043a \u0434\u0435\u0439\u0441\u0442\u0432\u0438\u044f \u0432\u044b\u0434\u0430\u0432\u0430\u0435\u043c\u044b\u0445 TLS-\u0441\u0435\u0440\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0432 \u0441 90 \u0434\u043e 45 \u0434\u043d\u0435\u0439. 10 \u0444\u0435\u0432\u0440\u0430\u043b\u044f 2027 \u0433\u043e\u0434\u0430 \u0441\u0440\u043e\u043a \u0434\u0435\u0439\u0441\u0442\u0432\u0438\u044f \u0441\u0435\u0440\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0432 \u0431\u0443\u0434\u0435\u0442 \u0441\u043e\u043a\u0440\u0430\u0449\u0451\u043d \u0434\u043e 64 \u0434\u043d\u0435\u0439, \u0430 16 \u0444\u0435\u0432\u0440\u0430\u043b\u044f 2028 \u0433\u043e\u0434\u0430 — \u0434\u043e 45 \u0434\u043d\u0435\u0439. \u041e\u043f\u0446\u0438\u043e\u043d\u0430\u043b\u044c\u043d\u0430\u044f \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044c \u043f\u043e\u043b\u0443\u0447\u0435\u043d\u0438\u044f \u0441\u0435\u0440\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0432, \u0434\u0435\u0439\u0441\u0442\u0432\u0443\u044e\u0449\u0438\u0445 45 \u0434\u043d\u0435\u0439, […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-150385","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47Let's Encrypt skr\u00e1ti platnos\u0165 certifik\u00e1tov na 45 dn\u00ed | ProHoster","description":"Neziskov\u00fd certifika\u010dn\u00fd \u00farad Let's Encrypt, riaden\u00fd komunitou a poskytuj\u00faci certifik\u00e1ty bezplatne v\u0161etk\u00fdm z\u00e1ujemcom, ozn\u00e1mil rozhodnutie postupne skr\u00e1ti\u0165 platnos\u0165 vyd\u00e1van\u00fdch TLS certifik\u00e1tov.","canonical_url":"https:\/\/prohoster.info\/sk\/blog\/news\/lets-encrypt-umenshit-srok-dejstviya-sertifikatov-do-45-dnej","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"sk_SK","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47Let&apos;s Encrypt \u0443\u043c\u0435\u043d\u044c\u0448\u0438\u0442 \u0441\u0440\u043e\u043a \u0434\u0435\u0439\u0441\u0442\u0432\u0438\u044f \u0441\u0435\u0440\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0432 \u0434\u043e 45 \u0434\u043d\u0435\u0439 | ProHoster","og:description":"\u041d\u0435\u043a\u043e\u043c\u043c\u0435\u0440\u0447\u0435\u0441\u043a\u0438\u0439 \u0443\u0434\u043e\u0441\u0442\u043e\u0432\u0435\u0440\u044f\u044e\u0449\u0438\u0439 \u0446\u0435\u043d\u0442\u0440 Let's Encrypt, \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u0438\u0440\u0443\u0435\u043c\u044b\u0439 \u0441\u043e\u043e\u0431\u0449\u0435\u0441\u0442\u0432\u043e\u043c \u0438 \u043f\u0440\u0435\u0434\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u044e\u0449\u0438\u0439 \u0441\u0435\u0440\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u044b \u0431\u0435\u0437\u0432\u043e\u0437\u043c\u0435\u0437\u0434\u043d\u043e \u0432\u0441\u0435\u043c \u0436\u0435\u043b\u0430\u044e\u0449\u0438\u043c, \u043e\u0431\u044a\u044f\u0432\u0438\u043b \u043e \u0440\u0435\u0448\u0435\u043d\u0438\u0438 \u043f\u043e\u044d\u0442\u0430\u043f\u043d\u043e \u0441\u043e\u043a\u0440\u0430\u0442\u0438\u0442\u044c \u0441\u0440\u043e\u043a \u0434\u0435\u0439\u0441\u0442\u0432\u0438\u044f \u0432\u044b\u0434\u0430\u0432\u0430\u0435\u043c\u044b\u0445 TLS-\u0441\u0435\u0440\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0432 \u0441.","og:url":"https:\/\/prohoster.info\/sk\/blog\/news\/lets-encrypt-umenshit-srok-dejstviya-sertifikatov-do-45-dnej","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2025-12-02T21:11:56+00:00","article:modified_time":"2025-12-02T21:11:56+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"150385","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":"default","schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":"2026-03-05 11:16:40","breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2026-01-23 16:22:20","updated":"2026-03-05 11:16:40","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/posts\/150385","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/comments?post=150385"}],"version-history":[{"count":1,"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/posts\/150385\/revisions"}],"predecessor-version":[{"id":163206,"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/posts\/150385\/revisions\/163206"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/media?parent=150385"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/categories?post=150385"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/tags?post=150385"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}