4.9.1.2 已翻譯 對應原文版本:2.3.0

廢止下屬憑證機構憑證之事由

跳至原文

Reasons for Revoking a Subordinate CA Certificate

The Issuing CA SHALL revoke a Subordinate CA Certificate within seven (7) days if one or more of the following occurs:

若發生下列一項或多項情形時,簽發憑證機構(Issuing CA)應(SHALL)於 7 日內廢止下屬憑證機構(Subordinate CA)憑證:

  1. The Subordinate CA requests revocation in writing;
  1. 下屬憑證機構以書面方式請求廢止;
  1. The Subordinate CA notifies the Issuing CA that the original certificate request was not authorized and does not retroactively grant authorization;
  1. 下屬憑證機構通知簽發憑證機構,其原始憑證申請未經授權,且不溯及既往補予授權;
  1. The Issuing CA obtains evidence that the Subordinate CA’s Private Key corresponding to the Public Key in the Certificate suffered a Key Compromise or no longer complies with the requirements of Section 6.1.5 and Section 6.1.6;
  1. 簽發憑證機構取得證據,顯示下屬憑證機構憑證中的公開金鑰(Public Key),其所對應之私密金鑰(Private Key)遭破解(Key Compromise),或已不再遵循第 6.1.5 節與第 6.1.6 節之規定;
  1. The Issuing CA obtains evidence that the Certificate was misused;
  1. 簽發憑證機構取得證據,顯示憑證遭誤用;
  1. The Issuing CA is made aware that the Certificate was not issued in accordance with or that Subordinate CA has not complied with this document or the applicable Certificate Policy or Certification Practice Statement;
  1. 簽發憑證機構獲悉該憑證未依據本文件規定簽發;或下屬憑證機構未遵循本文件規定、或者未遵循適用之憑證政策(Certificate Policy,CP)或憑證實務作業基準(Certification Practice Statement,CPS);
  1. The Issuing CA determines that any of the information appearing in the Certificate is inaccurate or misleading;
  1. 簽發憑證機構判定憑證所載之任何資訊有誤或具誤導性;
  1. The Issuing CA or Subordinate CA ceases operations for any reason and has not made arrangements for another CA to provide revocation support for the Certificate;
  1. 簽發憑證機構或下屬憑證機構因任何原因停止營運,且未安排其他 CA 為憑證提供廢止狀態服務;
  1. The Issuing CA’s or Subordinate CA’s right to issue Certificates under these Requirements expires or is revoked or terminated, unless the Issuing CA has made arrangements to continue maintaining the CRL/OCSP Repository; or
  1. 簽發憑證機構或下屬憑證機構依《基本要求》簽發憑證之權利到期、遭撤銷或終止,除非簽發憑證機構已作好安排以持續維護 CRL/OCSP 儲存庫;或
  1. Revocation is required by the Issuing CA’s Certificate Policy and/or Certification Practice Statement.
  1. 依簽發憑證機構的憑證政策(CP)及/或憑證實務作業基準(CPS),必須廢止該憑證。