{"id":37104,"date":"2021-10-01T12:24:26","date_gmt":"2021-10-01T05:24:26","guid":{"rendered":"https:\/\/wiki.tino.org\/staging\/?p=37104"},"modified":"2021-10-04T17:26:53","modified_gmt":"2021-10-04T10:26:53","slug":"dst-root-ca-x3-het-han-va-letsencrypt","status":"publish","type":"post","link":"https:\/\/tino.vn\/blog\/dst-root-ca-x3-het-han-va-letsencrypt\/","title":{"rendered":"DST Root CA X3 h\u1ebft h\u1ea1n v\u00e0 LetsEncrypt"},"content":{"rendered":"\n<p><strong>K\u1ec3 t\u1eeb ng\u00e0y 30 th\u00e1ng 9 n\u0103m 2024, ch\u1ee9ng ch\u1ec9 DST Root CA X3 \u0111\u01b0\u1ee3c s\u1eed d\u1ee5ng trong chu\u1ed7i trust DST Root cho <a href=\"https:\/\/tino.vn\/blog\/huong-dan-tao-chung-chi-ssl-mien-phi-voi-lets-encrypt\/\" target=\"_blank\" rel=\"noreferrer noopener\">Let&#8217;s Encrypt<\/a> s\u1ebd h\u1ebft h\u1ea1n. T\u00ecnh tr\u1ea1ng n\u00e0y khi\u1ebfn c\u00e1c \u1ee9ng d\u1ee5ng kh\u00f4ng nh\u1eadn ra ISRG Root X1 m\u1edbi s\u1ebd kh\u00f4ng th\u1ec3 ki\u1ec3m tra b\u1ea3o m\u1eadt khi truy c\u1eadp c\u00e1c trang web s\u1eed d\u1ee5ng Let&#8217;s Encrypt.<\/strong><\/p>\n\n\n\n<h2 id=\"H\u01b0\u1edbng_d\u1eabn_x\u1eed_l\u00fd_DST_Root_CA_X3_h\u1ebft_h\u1ea1n_v\u00e0_LetsEncrypt\"><strong>H\u01b0\u1edbng d\u1eabn x\u1eed l\u00fd DST Root CA X3 h\u1ebft h\u1ea1n v\u00e0 LetsEncrypt<\/strong><\/h2>\n\n\n\n<h3 id=\"Th\u00f4ng_tin_chi_ti\u1ebft\"><strong>Th\u00f4ng tin chi ti\u1ebft<\/strong><\/h3>\n\n\n\n<p>C\u00e1c chi ti\u1ebft v\u1ec1 v\u1ea5n \u0111\u1ec1 n\u00e0y c\u00f3 th\u1ec3 \u0111\u01b0\u1ee3c t\u00ecm th\u1ea5y trong b\u00e0i \u0111\u0103ng sau \u0111\u00e2y c\u1ee7a Let&#8217;s Encrypt: <a href=\"https:\/\/letsencrypt.org\/docs\/dst-root-ca-x3-expiration-september-2021\/\" target=\"_blank\" rel=\"noreferrer noopener nofollow\">DST Root CA X3 Expiration<\/a><\/p>\n\n\n\n<p>B\u1ea1n kh\u00f4ng c\u1ea7n lo l\u1eafng v\u00ec  h\u1ea7u h\u1ebft c\u00e1c  truy c\u1eadp website s\u1ebd t\u1ef1 \u0111\u1ed9ng ch\u1ea5p nh\u1eadn \u00a0ISRG Root X1 v\u00e0 v\u1eabn s\u1ebd truy c\u1eadp b\u00ecnh th\u01b0\u1eddng. Tuy nhi\u00ean, s\u1ebd c\u00f3 m\u1ed9t s\u1ed1 tr\u01b0\u1eddng h\u1ee3p khi truy c\u1eadp s\u1ebd s\u1ebd g\u1eb7p ph\u1ea3i l\u1ed7i li\u00ean quan \u0111\u1ebfn  k\u1ebft n\u1ed1i b\u1ea3o m\u1eadt nh\u01b0 d\u01b0\u1edbi \u0111\u00e2y:<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>K\u1ebft n\u1ed1i c\u1ee7a b\u1ea1n kh\u00f4ng ph\u1ea3i l\u00e0 k\u1ebft n\u1ed1i ri\u00eang t\u01b0\nNh\u1eefng k\u1ebb t\u1ea5n c\u00f4ng c\u00f3 th\u1ec3 \u0111ang c\u1ed1 g\u1eafng \u0111\u00e1nh c\u1eafp th\u00f4ng tin c\u1ee7a b\u1ea1n t\u1eeb website (v\u00ed d\u1ee5: m\u1eadt kh\u1ea9u, th\u01b0 ho\u1eb7c th\u1ebb t\u00edn d\u1ee5ng). T\u00ecm hi\u1ec3u th\u00eam\nNET::ERR_CERT_DATE_INVALID<\/code><\/pre>\n\n\n\n<h3 id=\"3_c\u00e1ch_x\u1eed_l\u00fd_DST_Root_CA_X3_h\u1ebft_h\u1ea1n_v\u00e0_LetsEncrypt\"><strong>3 c\u00e1ch x\u1eed l\u00fd DST Root CA X3 h\u1ebft h\u1ea1n v\u00e0 LetsEncrypt<\/strong><\/h3>\n\n\n\n<h4 id=\"_C\u00e1ch_1\"> <strong>C\u00e1ch 1<\/strong><\/h4>\n\n\n\n<p class=\"has-normal-font-size\">N\u1ebfu s\u1eed d\u1ee5ng tr\u00ecnh duy\u1ec7t Firefox, b\u1ea1n ch\u1ec9 c\u1ea7n c\u1eadp nh\u1eadt tr\u00ecnh duy\u1ec7t v\u00e0 s\u1ebd c\u00f3 th\u1ec3 truy c\u1eadp l\u1ea1i. Nguy\u00ean nh\u00e2n l\u00e0 c\u00e1c tr\u00ecnh duy\u1ec7t (Chrome, Safari, Edge, Opera) th\u01b0\u1eddng tin t\u01b0\u1edfng c\u00e1c root certificates nh\u01b0 h\u1ec7 \u0111i\u1ec1u h\u00e0nh m\u00e0 ch\u00fang \u0111ang ch\u1ea1y.\u00a0Nh\u01b0ng Firefox th\u00ec ngo\u1ea1i l\u1ec7: <meta charset=\"utf-8\">Firefox c\u00f3 kho l\u01b0u tr\u1eef root certificates c\u1ee7a ri\u00eang m\u00ecnh. V\u00ec v\u1eady n\u1ebfu d\u00f9ng c\u00e1c tr\u00ecnh duy\u1ec7t kh\u00e1c ngo\u00e0i firefox b\u1ea1n s\u1ebd c\u1ea7n . <\/p>\n\n\n\n<h4 id=\"C\u00e1ch_2\"><strong>C\u00e1ch 2<\/strong><\/h4>\n\n\n\n<p class=\"has-normal-font-size\">C\u1eadp nh\u1eadt h\u1ec7 \u0111i\u1ec1u h\u00e0nh \u0111ang s\u1eed d\u1ee5ng l\u00ean b\u1ea3n m\u1edbi nh\u1ea5t, chi ti\u1ebft c\u00e1c tr\u00ecnh duy\u1ec7t v\u00e0 h\u1ec7 \u0111i\u1ec1u h\u00e0nh h\u1ed7 tr\u1ee3 ISRG Root X b\u1ea1n c\u00f3 <a href=\"https:\/\/letsencrypt.org\/docs\/certificate-compatibility\/\" target=\"_blank\" rel=\"noreferrer noopener nofollow\">th\u1ec3 xem th\u00eam t\u1ea1i \u0111\u00e2y<\/a><\/p>\n\n\n\n<ul class=\"wp-block-list\"><li><strong>\u0110\u1ed1i v\u1edbi ng\u01b0\u1eddi d\u00f9ng s\u1eed d\u1ee5ng Windows: <\/strong>  B\u1ea1n c\u00f3 th\u1ec3 truy c\u1eadp tr\u00ean tr\u00ecnh duy\u1ec7t \u0111\u1ebfn \u0111\u1ecba ch\u1ec9  sau: <a href=\"https:\/\/valid-isrgrootx1.letsencrypt.org\/\" rel=\"nofollow noopener\" target=\"_blank\">https:\/\/valid-isrgrootx1.letsencrypt.org\/<\/a>  s\u1ebd nh\u1eafc Windows t\u1ef1 \u0111\u1ed9ng \u0111\u01b0a\u00a0<em>ISRG Root X1<\/em>\u00a0v\u00e0o root CA c\u1ee7a n\u00f3.<\/li><li><strong>\u0110\u1ed1i v\u1edbi macOS, iOS, v.v. : <\/strong>ch\u00fang gi\u1eef l\u1ea1i CA \u0111\u00e3 h\u1ebft h\u1ea1n. Do \u0111\u00f3, b\u1ea1n c\u00f3 th\u1ec3 th\u1eed reset c\u00e1c thi\u1ebft b\u1ecb sau \u0111\u00f3  th\u1eed truy c\u1eadp l\u1ea1i.<\/li><\/ul>\n\n\n\n<h4 id=\"C\u00e1ch_3\"><strong>C\u00e1ch 3<\/strong><\/h4>\n\n\n\n<p><strong>N\u1ebfu nh\u01b0 v\u00ec m\u1ed9t s\u1ed1 l\u00fd do li\u00ean quan h\u1ec7 th\u1ed1ng v\u00e0 b\u1ea3o m\u1eadt b\u1ea1n kh\u00f4ng th\u1ec3 update c\u00e1c thi\u1ebft b\u1ecb l\u00ean phi\u00ean b\u1ea3n m\u1edbi nh\u1ea5t, b\u1ea1n c\u00f3 th\u1ec3 \u0111\u0103ng k\u00fd s\u1eed s\u1ee5ng SSL c\u00f3 ph\u00ed kh\u00f4ng ph\u1ea3i l\u00e0 LetsEncrypt \u0111\u1ec3 kh\u1eafc ph\u1ee5c ho\u00e0n to\u00e0n l\u1ed7i n\u00e0y. B\u1ea1n c\u00f3 th\u1ec3 \u0111\u0103ng k\u00fd SSL c\u00f3 ph\u00ed t\u1ea1i link sau v\u00e0 g\u1eedi y\u00eau c\u1ea7u h\u1ed7 tr\u1ee3 \u0111\u1ec3 k\u1ef9 thu\u1eadt h\u1ed7 tr\u1ee3 c\u00e0i \u0111\u1eb7t m\u1ed9t c\u00e1ch nhanh ch\u00f3ng t\u01b0\u01a1ng th\u00edch cho h\u1ea7u h\u1ebft thi\u1ebft b\u1ecb :<a href=\"https:\/\/tinohost.com\/ssl\" target=\"_blank\" rel=\"noreferrer noopener\"> https:\/\/tinohost.com\/ssl<\/a><\/strong><\/p>\n\n\n\n<h2 id=\"Platforms_that_trust_ISRG_Root_X1\"><strong>Platforms that trust ISRG Root X1<\/strong><\/h2>\n\n\n\n<ul class=\"wp-block-list\"><li>Windows &gt;= XP SP3 (<a href=\"https:\/\/docs.microsoft.com\/en-us\/previous-versions\/windows\/it-pro\/windows-server-2008-R2-and-2008\/\" rel=\"nofollow noopener\" target=\"_blank\">assuming Automatic Root Certificate Update isn\u2019t manually disabled<\/a>)<\/li><li><a href=\"https:\/\/twitter.com\/letsencrypt\/status\/790960929504497665?lang=en\" rel=\"nofollow noopener\" target=\"_blank\">macOS &gt;= 10.12.1<\/a><\/li><li><a href=\"https:\/\/support.apple.com\/en-us\/HT207177\" rel=\"nofollow noopener\" target=\"_blank\">iOS &gt;= 10<\/a>&nbsp;(<a href=\"https:\/\/support.apple.com\/en-us\/HT205205\" rel=\"nofollow noopener\" target=\"_blank\">iOS 9 does not include it<\/a>)<\/li><li><a href=\"https:\/\/en.wikipedia.org\/wiki\/IPhone_5\" rel=\"nofollow noopener\" target=\"_blank\">iPhone 5 and above can upgrade to iOS 10<\/a>&nbsp;and can thus trust ISRG Root X1<\/li><li><a href=\"https:\/\/android.googlesource.com\/platform\/system\/ca-certificates\/+\/android-7.1.1_r15\" rel=\"nofollow noopener\" target=\"_blank\">Android &gt;= 7.1.1<\/a>&nbsp;(but Android &gt;= 2.3.6 will work by default&nbsp;<a href=\"https:\/\/letsencrypt.org\/2020\/12\/21\/extending-android-compatibility.html\" rel=\"nofollow noopener\" target=\"_blank\">due to our special cross-sign<\/a>)<\/li><li><a href=\"https:\/\/bugzilla.mozilla.org\/show_bug.cgi?id=1204656\" rel=\"nofollow noopener\" target=\"_blank\">Mozilla Firefox &gt;= 50.0<\/a><\/li><li><a href=\"https:\/\/packages.ubuntu.com\/xenial\/all\/ca-certificates\/filelist\" rel=\"nofollow noopener\" target=\"_blank\">Ubuntu &gt;= xenial \/ 16.04<\/a>&nbsp;(with updates applied)<\/li><li><a href=\"https:\/\/packages.debian.org\/jessie\/all\/ca-certificates\/filelist\" rel=\"nofollow noopener\" target=\"_blank\">Debian &gt;= jessie \/ 8<\/a>&nbsp;(with updates applied)<\/li><li><a href=\"https:\/\/www.oracle.com\/java\/technologies\/javase\/8u141-relnotes.html\" rel=\"nofollow noopener\" target=\"_blank\">Java 8 &gt;= 8u141<\/a><\/li><li><a href=\"https:\/\/www.oracle.com\/java\/technologies\/javase\/7u151-relnotes.html\" rel=\"nofollow noopener\" target=\"_blank\">Java 7 &gt;= 7u151<\/a><\/li><li><a href=\"https:\/\/developer.mozilla.org\/en-US\/docs\/Mozilla\/Projects\/NSS\/NSS_3.26_release_notes\" rel=\"nofollow noopener\" target=\"_blank\">NSS &gt;= 3.26<\/a><\/li><\/ul>\n\n\n\n<h2 id=\"Platforms_that_trust_DST_Root_CA_X3\"><strong>Platforms that trust DST Root CA X3<\/strong><\/h2>\n\n\n\n<ul class=\"wp-block-list\"><li>Windows &gt;= XP SP3<\/li><li>macOS (most versions)<\/li><li>iOS (most versions)<\/li><li><a href=\"https:\/\/twitter.com\/Tutancagamon\/status\/600783165087752192\" rel=\"nofollow noopener\" target=\"_blank\">Android &gt;= v2.3.6<\/a><\/li><li>Mozilla Firefox &gt;= v2.0<\/li><li>Ubuntu &gt;= precise \/ 12.04<\/li><li><a href=\"https:\/\/twitter.com\/TokenScandi\/status\/600806080684359680\" rel=\"nofollow noopener\" target=\"_blank\">Debian &gt;= squeeze \/ 6<\/a><\/li><li>Java 8 &gt;= 8u101<\/li><li>Java 7 &gt;= 7u111<\/li><li>NSS &gt;= v3.11.9<\/li><li>Amazon FireOS (Silk Browser)<\/li><li>Cyanogen &gt; v10<\/li><li>Jolla Sailfish OS &gt; v1.1.2.16<\/li><li>Kindle &gt; v3.4.1<\/li><li>Blackberry &gt;= 10.3.3<\/li><li>PS4 game console with firmware &gt;= 5.00<\/li><\/ul>\n\n\n\n<h2 id=\"Known_Incompatible\"><strong>Known Incompatible<\/strong><\/h2>\n\n\n\n<ul class=\"wp-block-list\"><li>Blackberry &lt; v10.3.3<\/li><li>Android &lt; v2.3.6<\/li><li>Nintendo 3DS<\/li><li>Windows XP prior to SP3<ul><li>cannot handle SHA-2 signed certificates<\/li><\/ul><\/li><li>Java 7 &lt; 7u111<\/li><li>Java 8 &lt; 8u101<\/li><li>Windows Live Mail (2012 mail client, not webmail)<ul><li>cannot handle certificates without a CRL<\/li><\/ul><\/li><li>PS3 game console<\/li><li>PS4 game console with firmware &lt; 5.00<\/li><\/ul>\n\n\n","protected":false},"excerpt":{"rendered":"<p>K\u1ec3 t\u1eeb ng\u00e0y 30 th\u00e1ng 9 n\u0103m 2024, ch\u1ee9ng ch\u1ec9 DST Root CA X3 \u0111\u01b0\u1ee3c s\u1eed d\u1ee5ng trong chu\u1ed7i trust DST Root cho Let&#8217;s Encrypt s\u1ebd h\u1ebft h\u1ea1n. T\u00ecnh tr\u1ea1ng n\u00e0y khi\u1ebfn c\u00e1c \u1ee9ng d\u1ee5ng kh\u00f4ng nh\u1eadn ra ISRG Root X1 m\u1edbi s\u1ebd kh\u00f4ng th\u1ec3 ki\u1ec3m tra b\u1ea3o m\u1eadt khi truy c\u1eadp c\u00e1c trang web [&hellip;]<\/p>\n","protected":false},"author":7,"featured_media":37105,"comment_status":"open","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[5408],"tags":[6187],"class_list":["post-37104","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-huong-dan-kien-thuc","tag-ho-tro-developer"],"_links":{"self":[{"href":"https:\/\/tino.vn\/blog\/wp-json\/wp\/v2\/posts\/37104","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/tino.vn\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/tino.vn\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/tino.vn\/blog\/wp-json\/wp\/v2\/users\/7"}],"replies":[{"embeddable":true,"href":"https:\/\/tino.vn\/blog\/wp-json\/wp\/v2\/comments?post=37104"}],"version-history":[{"count":0,"href":"https:\/\/tino.vn\/blog\/wp-json\/wp\/v2\/posts\/37104\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/tino.vn\/blog\/wp-json\/wp\/v2\/media\/37105"}],"wp:attachment":[{"href":"https:\/\/tino.vn\/blog\/wp-json\/wp\/v2\/media?parent=37104"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/tino.vn\/blog\/wp-json\/wp\/v2\/categories?post=37104"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/tino.vn\/blog\/wp-json\/wp\/v2\/tags?post=37104"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}