{"id":73997,"date":"2023-08-14T09:55:00","date_gmt":"2023-08-14T02:55:00","guid":{"rendered":"https:\/\/wiki.tino.org\/staging\/?p=73997"},"modified":"2025-06-18T18:51:04","modified_gmt":"2025-06-18T11:51:04","slug":"ssl-lets-encrypt-la-gi","status":"publish","type":"post","link":"https:\/\/tino.vn\/blog\/ssl-lets-encrypt-la-gi\/","title":{"rendered":"SSL Let\u2019s Encrypt l\u00e0 g\u00ec? T\u00ecm hi\u1ec3u \u01b0u nh\u01b0\u1ee3c \u0111i\u1ec3m v\u00e0 c\u00e1ch th\u1ee9c ho\u1ea1t \u0111\u1ed9ng c\u1ee7a SSL Let\u2019s Encrypt"},"content":{"rendered":"\n

Vi\u1ec7c b\u1ea3o m\u1eadt th\u00f4ng tin tr\u00ean Internet <\/a>tr\u1edf th\u00e0nh m\u1ed1i quan t\u00e2m h\u00e0ng \u0111\u1ea7u c\u1ee7a c\u00e1c t\u1ed5 ch\u1ee9c, doanh nghi\u1ec7p v\u00e0 c\u00e1 nh\u00e2n. M\u1ed9t trong nh\u1eefng c\u00e1ch ph\u1ed5 bi\u1ebfn \u0111\u1ec3 \u0111\u1ea3m b\u1ea3o t\u00ednh an to\u00e0n cho d\u1eef li\u1ec7u truy\u1ec1n qua m\u1ea1ng l\u00e0 s\u1eed d\u1ee5ng ch\u1ee9ng ch\u1ec9 SSL\/TLS<\/a>. Ch\u00ednh v\u00ec v\u1eady, Let’s Encrypt – \u0111\u00e3 xu\u1ea5t hi\u1ec7n v\u00e0 tr\u1edf th\u00e0nh l\u1ef1a ch\u1ecdn ph\u1ed5 bi\u1ebfn c\u1ee7a nhi\u1ec1u ng\u01b0\u1eddi. V\u1eady c\u1ee5 th\u1ec3 SSL Let\u2019s Encrypt l\u00e0 g\u00ec? C\u00e1c b\u1ea1n h\u00e3y c\u00f9ng TinoHost t\u00ecm hi\u1ec3u chi ti\u1ebft qua b\u00e0i vi\u1ebft h\u00f4m nay nh\u00e9!<\/strong><\/p>\n\n\n\n

T\u1ed5ng quan v\u1ec1 SSL Let\u2019s Encrypt<\/h2>\n\n\n\n

SSL Let\u2019s Encrypt l\u00e0 g\u00ec?<\/strong><\/h3>\n\n\n\n

Let’s Encrypt SSL l\u00e0 m\u1ed9t d\u1ef1 \u00e1n cung c\u1ea5p ch\u1ee9ng ch\u1ec9 SSL mi\u1ec5n ph\u00ed v\u00e0 m\u00e3 h\u00f3a b\u1ea3o m\u1eadt cho trang web. \u0110\u01b0\u1ee3c th\u00e0nh l\u1eadp b\u1edfi Internet Security Research Group (ISRG)<\/a>, d\u1ef1 \u00e1n h\u01b0\u1edbng \u0111\u1ebfn vi\u1ec7c t\u1ea1o \u0111i\u1ec1u ki\u1ec7n thu\u1eadn l\u1ee3i v\u00e0 \u0111\u01a1n gi\u1ea3n h\u00f3a qu\u00e1 tr\u00ecnh c\u1ea5p ch\u1ee9ng ch\u1ec9 SSL cho t\u1ea5t c\u1ea3 c\u00e1c trang web. M\u1ee5c ti\u00eau c\u1ee7a d\u1ef1 \u00e1n l\u00e0 \u0111\u1ea3m b\u1ea3o r\u1eb1ng m\u1ecdi trang web \u0111\u1ec1u s\u1eed d\u1ee5ng k\u1ebft n\u1ed1i an to\u00e0n th\u00f4ng qua giao th\u1ee9c HTTPS<\/a>, t\u1eeb \u0111\u00f3, n\u00e2ng cao b\u1ea3o m\u1eadt v\u00e0 b\u1ea3o v\u1ec7 th\u00f4ng tin c\u00e1 nh\u00e2n c\u1ee7a ng\u01b0\u1eddi d\u00f9ng tr\u00ean Internet.<\/p>\n\n\n\n

Let’s Encrypt SSL cung c\u1ea5p c\u00e1c ch\u1ee9ng ch\u1ec9 SSL c\u00f3 hi\u1ec7u l\u1ef1c trong m\u1ed9t kho\u1ea3ng th\u1eddi gian c\u1ee5 th\u1ec3 (th\u01b0\u1eddng l\u00e0 90 ng\u00e0y), sau \u0111\u00f3, ch\u1ee7 s\u1edf h\u1eefu trang web c\u1ea7n gia h\u1ea1n \u0111\u1ec3 ti\u1ebfp t\u1ee5c s\u1eed d\u1ee5ng d\u1ecbch v\u1ee5. D\u1ecbch v\u1ee5 n\u00e0y t\u1ef1 \u0111\u1ed9ng h\u00f3a qu\u00e1 tr\u00ecnh c\u1ea5p ch\u1ee9ng ch\u1ec9 SSL, gi\u00fap ng\u01b0\u1eddi d\u00f9ng d\u1ec5 d\u00e0ng tri\u1ec3n khai m\u00e3 h\u00f3a SSL m\u00e0 kh\u00f4ng c\u1ea7n ph\u1ea3i t\u1ed1n nhi\u1ec1u th\u1eddi gian v\u00e0 c\u00f4ng s\u1ee9c.<\/p>\n\n\n\n

Nh\u00ecn chung, Let’s Encrypt SSL l\u00e0 m\u1ed9t gi\u1ea3i ph\u00e1p h\u1eefu \u00edch \u0111\u1ed1i v\u1edbi c\u00e1c ch\u1ee7 s\u1edf h\u1eefu trang web nh\u1ecf v\u00e0 trung b\u00ecnh nh\u1edd t\u0103ng c\u01b0\u1eddng b\u1ea3o m\u1eadt m\u1ea1ng th\u00f4ng qua m\u00e3 h\u00f3a SSL m\u1ed9t c\u00e1ch hi\u1ec7u qu\u1ea3 v\u00e0 ti\u1ebft ki\u1ec7m chi ph\u00ed.<\/p>\n\n\n

\n
\"SSL
SSL Let\u2019s Encrypt l\u00e0 g\u00ec?<\/strong><\/figcaption><\/figure>\n<\/div>\n\n\n

Qu\u00e1 tr\u00ecnh ph\u00e1t tri\u1ec3n d\u1ef1 \u00e1n Let’s Encrypt<\/strong><\/h3>\n\n\n\n

Giai \u0111o\u1ea1n Predecessor Stage <\/h4>\n\n\n\n

Tr\u01b0\u1edbc khi Let’s Encrypt ra \u0111\u1eddi, vi\u1ec7c c\u1ea5p ch\u1ee9ng ch\u1ec9 SSL t\u1eeb c\u00e1c nh\u00e0 cung c\u1ea5p truy\u1ec1n th\u1ed1ng th\u01b0\u1eddng ph\u1ee9c t\u1ea1p v\u00e0 t\u1ed1n k\u00e9m. Ng\u01b0\u1eddi d\u00f9ng ph\u1ea3i mua ch\u1ee9ng ch\u1ec9 SSL v\u00e0 th\u1ef1c hi\u1ec7n nhi\u1ec1u b\u01b0\u1edbc x\u00e1c minh danh t\u00ednh ph\u1ee9c t\u1ea1p. C\u00e1c nh\u00e0 ph\u00e1t tri\u1ec3n Let’s Encrypt \u0111\u00e3 b\u1eaft \u0111\u1ea7u nh\u1eadn th\u1ee9c \u0111\u01b0\u1ee3c v\u1ec1 v\u1ea5n \u0111\u1ec1 n\u00e0y n\u00ean h\u1ecd l\u00ean k\u1ebf ho\u1ea1ch x\u00e2y d\u1ef1ng m\u1ed9t d\u1ef1 \u00e1n c\u00f3 kh\u1ea3 n\u0103ng cung c\u1ea5p ch\u1ee9ng ch\u1ec9 SSL mi\u1ec5n ph\u00ed.<\/p>\n\n\n\n

Giai \u0111o\u1ea1n kh\u1edfi \u0111\u1ea7u d\u1ef1 \u00e1n Let’s Encrypt (Project Initiation)<\/h4>\n\n\n\n

Let’s Encrypt \u0111\u01b0\u1ee3c b\u1eaft \u0111\u1ea7u v\u00e0o n\u0103m 2012 v\u1edbi vi\u1ec7c th\u00e0nh l\u1eadp Internet Security Research Group (ISRG) nh\u01b0 m\u1ed9t t\u1ed5 ch\u1ee9c phi l\u1ee3i nhu\u1eadn, ch\u1ecbu tr\u00e1ch nhi\u1ec7m qu\u1ea3n l\u00fd v\u00e0 tri\u1ec3n khai d\u1ef1 \u00e1n Let’s Encrypt. T\u1eeb \u0111\u00f3, d\u1ef1 \u00e1n \u0111\u00e3 nh\u1eadn \u0111\u01b0\u1ee3c s\u1ef1 h\u1ed7 tr\u1ee3 t\u1eeb nhi\u1ec1u t\u1ed5 ch\u1ee9c c\u00f4ng ngh\u1ec7 h\u00e0ng \u0111\u1ea7u, bao g\u1ed3m Mozilla, EFF (Electronic Frontier Foundation), Cisco, Akamai v\u00e0 nhi\u1ec1u nh\u00e0 t\u00e0i tr\u1ee3 kh\u00e1c.<\/p>\n\n\n\n

Ph\u00e1t tri\u1ec3n k\u1ef9 thu\u1eadt (Technical Development)<\/h4>\n\n\n\n

V\u00e0o n\u0103m 2014, c\u00e1c nh\u00e0 ph\u00e1t tri\u1ec3n Let’s Encrypt b\u1eaft \u0111\u1ea7u x\u00e2y d\u1ef1ng h\u1ec7 th\u1ed1ng ch\u1ee9ng ch\u1ec9 SSL mi\u1ec5n ph\u00ed v\u00e0 t\u1ef1 \u0111\u1ed9ng. H\u1ecd t\u1eadp trung v\u00e0o vi\u1ec7c x\u00e2y d\u1ef1ng giao th\u1ee9c ACME (Automated Certificate Management Environment) \u0111\u1ec3 th\u1ef1c hi\u1ec7n c\u00e1c quy tr\u00ecnh x\u00e1c minh v\u00e0 c\u1ea5p ch\u1ee9ng ch\u1ec9 t\u1ef1 \u0111\u1ed9ng. Giao th\u1ee9c ACME cho ph\u00e9p c\u00e1c m\u00e1y ch\u1ee7 web t\u01b0\u01a1ng t\u00e1c v\u1edbi Let’s Encrypt \u0111\u1ec3 y\u00eau c\u1ea7u, x\u00e1c minh v\u00e0 c\u00e0i \u0111\u1eb7t ch\u1ee9ng ch\u1ec9 SSL.<\/p>\n\n\n

\n
\"\"
Qu\u00e1 tr\u00ecnh ph\u00e1t tri\u1ec3n d\u1ef1 \u00e1n Let’s Encrypt<\/strong><\/strong><\/figcaption><\/figure>\n<\/div>\n\n\n

C\u1ea5p ch\u1ee9ng ch\u1ec9 SSL \u0111\u1ea7u ti\u00ean (First SSL Certificate Issued)<\/h4>\n\n\n\n

V\u00e0o th\u00e1ng 9 n\u0103m 2015, Let’s Encrypt th\u1ef1c hi\u1ec7n th\u1eed nghi\u1ec7m ho\u1ea1t \u0111\u1ed9ng c\u1ed9ng \u0111\u1ed3ng v\u00e0 ph\u00e1t h\u00e0nh ch\u1ee9ng ch\u1ec9 SSL \u0111\u1ea7u ti\u00ean c\u1ee7a h\u1ecd. \u0110i\u1ec1u n\u00e0y \u0111\u00e1nh d\u1ea5u b\u01b0\u1edbc ti\u1ebfn quan tr\u1ecdng trong vi\u1ec7c cung c\u1ea5p m\u00e3 h\u00f3a SSL mi\u1ec5n ph\u00ed v\u00e0 t\u1ef1 \u0111\u1ed9ng cho c\u1ed9ng \u0111\u1ed3ng.<\/p>\n\n\n\n

Ra m\u1eaft ch\u00ednh th\u1ee9c (Official Launch)<\/h4>\n\n\n\n

V\u00e0o ng\u00e0y 3 th\u00e1ng 12 n\u0103m 2015, Let’s Encrypt ch\u00ednh th\u1ee9c ra m\u1eaft v\u00e0 b\u1eaft \u0111\u1ea7u cung c\u1ea5p ch\u1ee9ng ch\u1ec9 SSL mi\u1ec5n ph\u00ed cho t\u1ea5t c\u1ea3 ng\u01b0\u1eddi d\u00f9ng. D\u1ef1 \u00e1n nhanh ch\u00f3ng thu h\u00fat s\u1ef1 quan t\u00e2m v\u00e0 tin t\u01b0\u1edfng c\u1ee7a nhi\u1ec1u ng\u01b0\u1eddi d\u00f9ng v\u00e0 t\u1ed5 ch\u1ee9c tr\u00ean to\u00e0n th\u1ebf gi\u1edbi.<\/p>\n\n\n\n

Ph\u00e1t tri\u1ec3n v\u00e0 m\u1edf r\u1ed9ng (Continued Development and Expansion)<\/h4>\n\n\n\n

K\u1ec3 t\u1eeb khi ra m\u1eaft, Let’s Encrypt kh\u00f4ng ng\u1eebng ph\u00e1t tri\u1ec3n v\u00e0 m\u1edf r\u1ed9ng. H\u1ecd \u0111\u00e3 cung c\u1ea5p c\u00e1c t\u00ednh n\u0103ng m\u1edbi, t\u1ed1i \u01b0u h\u00f3a hi\u1ec7u su\u1ea5t \u0111\u1ed3ng th\u1eddi c\u1ea3i thi\u1ec7n quy tr\u00ecnh c\u1ea5p ch\u1ee9ng ch\u1ec9 \u0111\u1ec3 l\u00e0m cho vi\u1ec7c tri\u1ec3n khai SSL tr\u00ean trang web d\u1ec5 d\u00e0ng v\u00e0 hi\u1ec7u qu\u1ea3 h\u01a1n.<\/p>\n\n\n\n

C\u00e1c lo\u1ea1i ch\u1ee9ng ch\u1ec9 SSL do Let’s Encrypt SSL cung c\u1ea5p<\/strong><\/h3>\n\n\n\n

Ch\u1ee9ng ch\u1ec9 SSL d\u00e0nh cho t\u00ean mi\u1ec1n ch\u00ednh (Domain Validation – DV SSL)<\/h4>\n\n\n\n

Lo\u1ea1i ch\u1ee9ng ch\u1ec9 n\u00e0y \u0111\u01b0\u1ee3c cung c\u1ea5p mi\u1ec5n ph\u00ed b\u1edfi Let’s Encrypt v\u00e0 kh\u00e1 \u0111\u01a1n gi\u1ea3n \u0111\u1ec3 tri\u1ec3n khai. Qu\u00e1 tr\u00ecnh x\u00e1c minh (validation) ch\u1ec9 y\u00eau c\u1ea7u ch\u1ee9ng minh r\u1eb1ng b\u1ea1n l\u00e0 ch\u1ee7 s\u1edf h\u1eefu c\u1ee7a t\u00ean mi\u1ec1n<\/a> b\u1eb1ng c\u00e1ch \u0111\u1eb7t m\u1ed9t t\u1ec7p ho\u1eb7c th\u00eam m\u1ed9t b\u1ea3n ghi DNS<\/a> v\u00e0o t\u00ean mi\u1ec1n.<\/p>\n\n\n\n

Ch\u1ee9ng ch\u1ec9 DV SSL ch\u1ec9 x\u00e1c minh t\u00ednh h\u1ee3p l\u1ec7 c\u1ee7a t\u00ean mi\u1ec1n v\u00e0 kh\u00f4ng ki\u1ec3m tra t\u00ednh x\u00e1c th\u1ef1c hay danh t\u00ednh c\u1ee7a ch\u1ee7 s\u1edf h\u1eefu. Do \u0111\u00f3, ch\u1ee9ng ch\u1ec9 n\u00e0y ph\u00f9 h\u1ee3p cho c\u00e1c trang web c\u00e1 nh\u00e2n, blog ho\u1eb7c trang web nh\u1ecf, n\u01a1i t\u00ednh b\u1ea3o m\u1eadt cao h\u01a1n l\u00e0 y\u00eau c\u1ea7u x\u00e1c th\u1ef1c chi ti\u1ebft v\u1ec1 ch\u1ee7 s\u1edf h\u1eefu.<\/p>\n\n\n

\n
\"C\u00e1c
C\u00e1c lo\u1ea1i ch\u1ee9ng ch\u1ec9 SSL do Let’s Encrypt SSL cung c\u1ea5p<\/strong><\/figcaption><\/figure>\n<\/div>\n\n\n

Ch\u1ee9ng ch\u1ec9 SSL \u0111a t\u00ean mi\u1ec1n (Multi-Domain\/SAN – Subject Alternative Names)<\/h4>\n\n\n\n

Ngo\u00e0i ch\u1ee9ng ch\u1ec9 SSL d\u00e0nh cho t\u00ean mi\u1ec1n ch\u00ednh, Let’s Encrypt cung c\u1ea5p ch\u1ee9ng ch\u1ec9 SAN cho ph\u00e9p b\u1ea3o m\u1eadt nhi\u1ec1u t\u00ean mi\u1ec1n tr\u00ean c\u00f9ng m\u1ed9t ch\u1ee9ng ch\u1ec9. Lo\u1ea1i ch\u1ee9ng ch\u1ec9 n\u00e0y c\u0169ng c\u00f3 th\u1ec3 \u0111\u01b0\u1ee3c g\u1ecdi l\u00e0 ch\u1ee9ng ch\u1ec9 Wildcard v\u00ec c\u00f3 th\u1ec3 b\u1ea3o m\u1eadt m\u1ed9t t\u00ean mi\u1ec1n ch\u00ednh v\u00e0 t\u1ea5t c\u1ea3 c\u00e1c con t\u00ean mi\u1ec1n con.<\/p>\n\n\n\n

Ch\u1ee9ng ch\u1ec9 SSL SAN r\u1ea5t h\u1eefu \u00edch cho c\u00e1c trang web c\u00f3 nhi\u1ec1u t\u00ean mi\u1ec1n con li\u00ean quan ho\u1eb7c trang web \u0111a ng\u00f4n ng\u1eef \u0111\u01b0\u1ee3c \u0111\u1eb7t v\u1edbi nhi\u1ec1u t\u00ean mi\u1ec1n. V\u1edbi ch\u1ee9ng ch\u1ec9 SAN, b\u1ea1n c\u00f3 th\u1ec3 b\u1ea3o m\u1eadt c\u00f9ng m\u1ed9t trang web tr\u00ean nhi\u1ec1u t\u00ean mi\u1ec1n, gi\u00fap ti\u1ebft ki\u1ec7m chi ph\u00ed v\u00e0 c\u00f4ng s\u1ee9c trong vi\u1ec7c qu\u1ea3n l\u00fd ch\u1ee9ng ch\u1ec9.<\/p>\n\n\n\n

Let’s Encrypt SSL ho\u1ea1t \u0111\u1ed9ng nh\u01b0 th\u1ebf n\u00e0o?<\/strong><\/h3>\n\n\n\n

B\u01b0\u1edbc 1: Y\u00eau c\u1ea7u ch\u1ee9ng ch\u1ec9 SSL<\/h4>\n\n\n\n

\u0110\u1ea7u ti\u00ean, ch\u1ee7 s\u1edf h\u1eefu trang web c\u1ea7n y\u00eau c\u1ea7u ch\u1ee9ng ch\u1ec9 SSL cho t\u00ean mi\u1ec1n c\u1ee7a h\u1ecd th\u00f4ng qua m\u1ed9t \u1ee9ng d\u1ee5ng c\u00f3 h\u1ed7 tr\u1ee3 Let’s Encrypt nh\u01b0 cPanel.<\/p>\n\n\n\n

B\u01b0\u1edbc 2: X\u00e1c minh t\u00ean mi\u1ec1n (Domain Validation – DV)<\/h4>\n\n\n\n

Sau khi nh\u1eadn \u0111\u01b0\u1ee3c y\u00eau c\u1ea7u, Let’s Encrypt th\u1ef1c hi\u1ec7n qu\u00e1 tr\u00ecnh x\u00e1c minh t\u00ean mi\u1ec1n. Qu\u00e1 tr\u00ecnh n\u00e0y d\u1ef1a tr\u00ean ph\u01b0\u01a1ng th\u1ee9c Domain Validation (DV), \u0111\u00f2i h\u1ecfi ch\u1ee7 s\u1edf h\u1eefu ch\u1ee9ng minh r\u1eb1ng h\u1ecd th\u1ef1c s\u1ef1 l\u00e0 ng\u01b0\u1eddi ki\u1ec3m so\u00e1t t\u00ean mi\u1ec1n \u0111\u00f3. \u0110i\u1ec1u \u0111\u00f3 c\u00f3 th\u1ec3 \u0111\u01b0\u1ee3c th\u1ef1c hi\u1ec7n b\u1eb1ng c\u00e1ch \u0111\u1eb7t m\u1ed9t t\u1ec7p nh\u1ea5t \u0111\u1ecbnh v\u00e0o th\u01b0 m\u1ee5c web ho\u1eb7c th\u00eam m\u1ed9t b\u1ea3n ghi DNS v\u00e0o t\u00ean mi\u1ec1n.<\/p>\n\n\n

\n
\"Let's
Let’s Encrypt SSL ho\u1ea1t \u0111\u1ed9ng nh\u01b0 th\u1ebf n\u00e0o?<\/strong><\/figcaption><\/figure>\n<\/div>\n\n\n

B\u01b0\u1edbc 3: T\u1ea1o ch\u1eef k\u00fd SSL (Certificate Signing Request – CSR)<\/h4>\n\n\n\n

Sau khi x\u00e1c minh t\u00ean mi\u1ec1n, m\u00e1y ch\u1ee7 web s\u1ebd t\u1ea1o m\u1ed9t ch\u1eef k\u00fd SSL (CSR) ch\u1ee9a th\u00f4ng tin v\u1ec1 t\u00ean mi\u1ec1n v\u00e0 kh\u00f3a c\u00f4ng khai.<\/p>\n\n\n\n

B\u01b0\u1edbc 4: C\u1ea5p ch\u1ee9ng ch\u1ec9 SSL<\/h4>\n\n\n\n

CSR \u0111\u01b0\u1ee3c g\u1eedi \u0111\u1ebfn Let’s Encrypt. Trong qu\u00e1 tr\u00ecnh n\u00e0y, Let’s Encrypt s\u1ebd t\u1ea1o ch\u1ee9ng ch\u1ec9 SSL ch\u1ee9a kh\u00f3a c\u00f4ng khai v\u00e0 th\u00f4ng tin t\u00ean mi\u1ec1n. Ch\u1ee9ng ch\u1ec9 s\u1ebd \u0111\u01b0\u1ee3c k\u00fd b\u1eb1ng ch\u1eef k\u00fd c\u1ee7a Let’s Encrypt.<\/p>\n\n\n\n

B\u01b0\u1edbc 5: C\u00e0i \u0111\u1eb7t ch\u1ee9ng ch\u1ec9 SSL<\/h4>\n\n\n\n

Cu\u1ed1i c\u00f9ng, ch\u1ee9ng ch\u1ec9 SSL s\u1ebd \u0111\u01b0\u1ee3c c\u00e0i \u0111\u1eb7t tr\u00ean m\u00e1y ch\u1ee7 web, k\u00e8m theo kh\u00f3a ri\u00eang t\u01b0 t\u01b0\u01a1ng \u1ee9ng. Khi \u0111\u00f3, trang web \u0111\u00e3 \u0111\u01b0\u1ee3c c\u1ea5u h\u00ecnh \u0111\u1ec3 s\u1eed d\u1ee5ng SSL\/TLS c\u00f3 th\u1ec3 s\u1eed d\u1ee5ng m\u00e3 h\u00f3a an to\u00e0n cho c\u00e1c k\u1ebft n\u1ed1i gi\u1eefa m\u00e1y ch\u1ee7 web v\u00e0 tr\u00ecnh duy\u1ec7t.<\/p>\n\n\n\n

B\u01b0\u1edbc 6: T\u1ef1 \u0111\u1ed9ng gia h\u1ea1n ch\u1ee9ng ch\u1ec9<\/h4>\n\n\n\n

Ch\u1ee9ng ch\u1ec9 SSL t\u1eeb Let’s Encrypt c\u00f3 hi\u1ec7u l\u1ef1c trong m\u1ed9t kho\u1ea3ng th\u1eddi gian nh\u1ea5t \u0111\u1ecbnh (th\u01b0\u1eddng l\u00e0 90 ng\u00e0y). Tuy nhi\u00ean, Let’s Encrypt h\u1ed7 tr\u1ee3 t\u1ef1 \u0111\u1ed9ng gia h\u1ea1n ch\u1ee9ng ch\u1ec9 m\u1ed9t c\u00e1ch t\u1ef1 \u0111\u1ed9ng th\u00f4ng qua c\u00f4ng c\u1ee5 qu\u1ea3n l\u00fd ch\u1ee9ng ch\u1ec9 nh\u01b0 Certbot, gi\u00fap ch\u1ee7 s\u1edf h\u1eefu trang web ti\u1ebfp t\u1ee5c s\u1eed d\u1ee5ng m\u00e3 h\u00f3a b\u1ea3o m\u1eadt m\u00e0 kh\u00f4ng ph\u1ea3i th\u1ef1c hi\u1ec7n th\u1ee7 c\u00f4ng.<\/p>\n\n\n\n

Nh\u1eefng l\u1ee3i \u00edch khi s\u1eed d\u1ee5ng SSL c\u1ee7a Let’s Encrypt<\/strong><\/h3>\n\n\n\n

Mi\u1ec5n ph\u00ed ho\u00e0n to\u00e0n<\/h4>\n\n\n\n

Let’s Encrypt cung c\u1ea5p ch\u1ee9ng ch\u1ec9 SSL ho\u00e0n to\u00e0n mi\u1ec5n ph\u00ed, kh\u00f4ng \u0111\u00f2i h\u1ecfi b\u1ea5t k\u1ef3 chi ph\u00ed n\u00e0o cho vi\u1ec7c s\u1eed d\u1ee5ng m\u00e3 h\u00f3a SSL. \u0110i\u1ec1u n\u00e0y l\u00e0m gi\u1ea3m b\u1edbt g\u00e1nh n\u1eb7ng t\u00e0i ch\u00ednh cho c\u00e1c ch\u1ee7 s\u1edf h\u1eefu trang web, \u0111\u1eb7c bi\u1ec7t l\u00e0 v\u1edbi c\u00e1c trang web nh\u1ecf.<\/p>\n\n\n\n

B\u1ea3o m\u1eadt cao c\u1ea5p<\/h4>\n\n\n\n

Let’s Encrypt SSL cung c\u1ea5p m\u00e3 h\u00f3a SSL\/TLS c\u00f3 \u0111\u1ed9 b\u1ea3o m\u1eadt cao, c\u00f3 kh\u1ea3 n\u0103ng b\u1ea3o v\u1ec7 th\u00f4ng tin c\u00e1 nh\u00e2n, giao d\u1ecbch t\u00e0i ch\u00ednh v\u00e0 d\u1eef li\u1ec7u c\u1ee7a ng\u01b0\u1eddi d\u00f9ng tr\u00ean trang web m\u1ed9t c\u00e1ch hi\u1ec7u qu\u1ea3. \u0110i\u1ec1u n\u00e0y gi\u00fap ng\u0103n ch\u1eb7n c\u00e1c cu\u1ed9c t\u1ea5n c\u00f4ng m\u1ea1ng nh\u01b0 \u0111\u00e1nh c\u1eafp th\u00f4ng tin v\u00e0 gi\u1ea3 m\u1ea1o d\u1eef li\u1ec7u<\/p>\n\n\n\n

T\u1ef1 \u0111\u1ed9ng h\u00f3a v\u00e0 d\u1ec5 d\u00e0ng tri\u1ec3n khai<\/h4>\n\n\n\n

Let’s Encrypt t\u1ef1 \u0111\u1ed9ng h\u00f3a qu\u00e1 tr\u00ecnh x\u00e1c minh v\u00e0 c\u1ea5p ch\u1ee9ng ch\u1ec9 SSL, gi\u00fap ng\u01b0\u1eddi d\u00f9ng d\u1ec5 d\u00e0ng tri\u1ec3n khai m\u00e3 h\u00f3a SSL m\u00e0 kh\u00f4ng c\u1ea7n ph\u1ea3i th\u1ef1c hi\u1ec7n c\u00e1c b\u01b0\u1edbc ph\u1ee9c t\u1ea1p. C\u00f4ng c\u1ee5 qu\u1ea3n l\u00fd ch\u1ee9ng ch\u1ec9 nh\u01b0 Certbot s\u1ebd h\u1ed7 tr\u1ee3 t\u1ef1 \u0111\u1ed9ng gia h\u1ea1n ch\u1ee9ng ch\u1ec9, gi\u00fap duy tr\u00ec t\u00ednh b\u1ea3o m\u1eadt li\u00ean t\u1ee5c v\u00e0 \u0111\u00e1ng tin c\u1eady.<\/p>\n\n\n

\n
\"Nh\u1eefng
Nh\u1eefng l\u1ee3i \u00edch khi s\u1eed d\u1ee5ng SSL c\u1ee7a Let’s Encrypt<\/strong><\/figcaption><\/figure>\n<\/div>\n\n\n

T\u01b0\u01a1ng th\u00edch r\u1ed9ng r\u00e3i<\/h4>\n\n\n\n

Let’s Encrypt SSL t\u01b0\u01a1ng th\u00edch v\u1edbi h\u1ea7u h\u1ebft c\u00e1c tr\u00ecnh duy\u1ec7t hi\u1ec7n \u0111\u1ea1i v\u00e0 c\u00e1c h\u1ec7 th\u1ed1ng m\u00e1y ch\u1ee7 web ph\u1ed5 bi\u1ebfn nh\u01b0 Apache<\/a>, Nginx<\/a>, CentOS, Ubuntu,… \u0110i\u1ec1u n\u00e0y gi\u00fap ch\u1ee7 s\u1edf h\u1eefu trang web d\u1ec5 d\u00e0ng tri\u1ec3n khai SSL tr\u00ean n\u1ec1n t\u1ea3ng c\u1ee7a h\u1ecd m\u00e0 kh\u00f4ng g\u1eb7p v\u1ea5n \u0111\u1ec1 t\u01b0\u01a1ng th\u00edch.<\/p>\n\n\n\n

H\u1ed7 tr\u1ee3 ch\u1ee9ng ch\u1ec9 SAN (Subject Alternative Names)<\/h4>\n\n\n\n

Let’s Encrypt h\u1ed7 tr\u1ee3 ch\u1ee9ng ch\u1ec9 SSL \u0111a t\u00ean mi\u1ec1n (SAN), cho ph\u00e9p b\u1ea3o m\u1eadt nhi\u1ec1u t\u00ean mi\u1ec1n tr\u00ean c\u00f9ng m\u1ed9t ch\u1ee9ng ch\u1ec9. \u0110i\u1ec1u n\u00e0y ti\u1ebft ki\u1ec7m chi ph\u00ed v\u00e0 qu\u1ea3n l\u00fd ch\u1ee9ng ch\u1ec9 khi c\u1ea7n b\u1ea3o m\u1eadt nhi\u1ec1u t\u00ean mi\u1ec1n li\u00ean quan.<\/p>\n\n\n\n

C\u1ed9ng \u0111\u1ed3ng h\u1ed7 tr\u1ee3 m\u1ea1nh m\u1ebd<\/h4>\n\n\n\n

Let’s Encrypt \u0111\u01b0\u1ee3c h\u1ed7 tr\u1ee3 m\u1ea1nh m\u1ebd b\u1edfi c\u1ed9ng \u0111\u1ed3ng c\u00f4ng ngh\u1ec7 to\u00e0n c\u1ea7u. \u0110i\u1ec1u n\u00e0y gi\u00fap \u0111\u1ea3m b\u1ea3o ngu\u1ed3n l\u1ef1c c\u0169ng nh\u01b0 ki\u1ebfn th\u1ee9c \u0111\u1ec3 duy tr\u00ec v\u00e0 c\u1ea3i ti\u1ebfn d\u1ef1 \u00e1n li\u00ean t\u1ee5c.<\/p>\n\n\n\n

So s\u00e1nh ch\u1ee9ng ch\u1ec9 SSL c\u1ee7a Let’s Encrypt v\u00e0 c\u00e1c SSL tr\u1ea3 ph\u00ed<\/strong><\/h2>\n\n\n\n

Let\u2019s Encrypt cung c\u1ea5p m\u1ed9t gi\u1ea3i ph\u00e1p SSL mi\u1ec5n ph\u00ed v\u00e0 t\u1ef1 \u0111\u1ed9ng, gi\u00fap ph\u1ed5 bi\u1ebfn HTTPS tr\u00ean to\u00e0n c\u1ea7u. Tuy nhi\u00ean, c\u00e1c ch\u1ee9ng ch\u1ec9 SSL tr\u1ea3 ph\u00ed t\u1eeb c\u00e1c nh\u00e0 cung c\u1ea5p kh\u00e1c v\u1eabn c\u00f3 nh\u1eefng \u01b0u \u0111i\u1ec3m ri\u00eang, \u0111\u1eb7c bi\u1ec7t \u0111\u1ed1i v\u1edbi c\u00e1c doanh nghi\u1ec7p l\u1edbn ho\u1eb7c c\u00e1c trang web c\u00f3 y\u00eau c\u1ea7u b\u1ea3o m\u1eadt v\u00e0 h\u1ed7 tr\u1ee3 cao h\u01a1n. D\u01b0\u1edbi \u0111\u00e2y l\u00e0 b\u1ea3ng so s\u00e1nh t\u1ed5ng quan:<\/p>\n\n\n\n

T\u00ednh n\u0103ng\/\u0110\u1eb7c \u0111i\u1ec3m<\/strong><\/td>SSL Let\u2019s Encrypt<\/strong><\/td>SSL tr\u1ea3 ph\u00ed<\/strong><\/td><\/tr>
Chi ph\u00ed<\/strong><\/td>Mi\u1ec5n ph\u00ed<\/td>C\u00f3 ph\u00ed (t\u00f9y thu\u1ed9c v\u00e0o lo\u1ea1i ch\u1ee9ng ch\u1ec9 v\u00e0 nh\u00e0 cung c\u1ea5p)<\/td><\/tr>
Th\u1eddi h\u1ea1n hi\u1ec7u l\u1ef1c<\/strong><\/td>90 ng\u00e0y (t\u1ef1 \u0111\u1ed9ng gia h\u1ea1n)<\/td>1-3 n\u0103m (c\u00f3 th\u1ec3 gia h\u1ea1n)<\/td><\/tr>
M\u1ee9c \u0111\u1ed9 x\u00e1c th\u1ef1c<\/strong><\/td>DV (Domain Validation)<\/td>DV (Domain Validation), OV (Organization Validation), EV (Extended Validation)<\/td><\/tr>
Lo\u1ea1i ch\u1ee9ng ch\u1ec9<\/strong><\/td>DV, Wildcard, SAN<\/td>DV, OV, EV, Wildcard, SAN, Multi-domain, UCC<\/td><\/tr>
H\u1ed7 tr\u1ee3 k\u1ef9 thu\u1eadt<\/strong><\/td>C\u1ed9ng \u0111\u1ed3ng, t\u00e0i li\u1ec7u tr\u1ef1c tuy\u1ebfn<\/td>H\u1ed7 tr\u1ee3 chuy\u00ean nghi\u1ec7p 24\/7 t\u1eeb nh\u00e0 cung c\u1ea5p<\/td><\/tr>
B\u1ea3o hi\u1ec3m<\/strong><\/td>Kh\u00f4ng c\u00f3<\/td>C\u00f3 (t\u00f9y thu\u1ed9c v\u00e0o nh\u00e0 cung c\u1ea5p v\u00e0 lo\u1ea1i ch\u1ee9ng ch\u1ec9, c\u00f3 th\u1ec3 l\u00ean \u0111\u1ebfn h\u00e0ng tri\u1ec7u USD)<\/td><\/tr>
Thanh \u0111\u1ecba ch\u1ec9 tr\u00ecnh duy\u1ec7t<\/strong><\/td>Hi\u1ec3n th\u1ecb bi\u1ec3u t\u01b0\u1ee3ng kh\u00f3a (padlock) v\u00e0 HTTPS<\/td>Hi\u1ec3n th\u1ecb bi\u1ec3u t\u01b0\u1ee3ng kh\u00f3a (padlock) v\u00e0 HTTPS. \u0110\u1ed1i v\u1edbi EV SSL, hi\u1ec3n th\u1ecb t\u00ean c\u00f4ng ty tr\u00ean thanh \u0111\u1ecba ch\u1ec9 (tr\u01b0\u1edbc \u0111\u00e2y).<\/td><\/tr>
Ph\u00f9 h\u1ee3p v\u1edbi<\/strong><\/td>Trang web c\u00e1 nh\u00e2n, blog, d\u1ef1 \u00e1n nh\u1ecf, trang web kh\u00f4ng y\u00eau c\u1ea7u x\u00e1c th\u1ef1c danh t\u00ednh t\u1ed5 ch\u1ee9c cao<\/td>Doanh nghi\u1ec7p, trang web th\u01b0\u01a1ng m\u1ea1i \u0111i\u1ec7n t\u1eed, ng\u00e2n h\u00e0ng, t\u1ed5 ch\u1ee9c t\u00e0i ch\u00ednh, trang web y\u00eau c\u1ea7u m\u1ee9c \u0111\u1ed9 tin c\u1eady v\u00e0 x\u00e1c th\u1ef1c cao<\/td><\/tr><\/tbody><\/table><\/figure>\n\n\n\n

N\u00ean s\u1eed d\u1ee5ng SSL c\u1ee7a Let’s Encrypt hay SSL tr\u1ea3 ph\u00ed?<\/strong><\/h3>\n\n\n\n

S\u1eed d\u1ee5ng SSL c\u1ee7a Let’s Encrypt n\u1ebfu:<\/p>\n\n\n\n