憑證機構處理憑證廢止請求之期限

Time within which CA must process the revocation request

Within 24 hours after receiving a Certificate Problem Report, the CA SHALL investigate the facts and circumstances related to a Certificate Problem Report and provide a preliminary report on its findings to both the Subscriber and the entity who filed the Certificate Problem Report.

憑證機構（Certification Authority，CA）應（SHALL）於收到憑證問題報告（Certificate Problem Report）後 24 小時內，調查與憑證問題報告相關的事實與情況，並向用戶（Subscriber）及提出該憑證問題報告之實體提供其調查結果之初步報告。

After reviewing the facts and circumstances, the CA SHALL work with the Subscriber and any entity reporting the Certificate Problem Report or other revocation-related notice to establish whether or not the certificate will be revoked, and if so, a date which the CA will revoke the certificate. The period from receipt of the Certificate Problem Report or revocation-related notice to published revocation MUST NOT exceed the time frame set forth in Section 4.9.1.1. The date selected by the CA SHOULD consider the following criteria:

在審查相關事實與情況後，CA 應（SHALL）與用戶及提出憑證問題報告或其他提出憑證廢止相關通知之任何實體合作，以確認是否廢止憑證；如應予廢止，應同步確定 CA 廢止該憑證之日期。自收到憑證問題報告或憑證廢止相關通知起，至公布憑證廢止之期間，不得（MUST NOT）超過第 4.9.1.1 節所規定之時限。CA 於決定廢止日期時，宜（SHOULD）考慮以下因素：

1. The nature of the alleged problem (scope, context, severity, magnitude, risk of harm);

1. 所指稱問題之性質（包括其範圍、背景、嚴重程度、影響規模及造成危害之風險）；

2. The consequences of revocation (direct and collateral impacts to Subscribers and Relying Parties);

2. 憑證廢止之後果（對用戶及信賴憑證者（Relying Party）的直接及附加影響）；

3. The number of Certificate Problem Reports received about a particular Certificate or Subscriber;

3. 收到針對特定憑證或用戶之憑證問題報告數量；

4. The entity making the complaint (for example, a complaint from a law enforcement official that a Web site is engaged in illegal activities should carry more weight than a complaint from a consumer alleging that they didn’t receive the goods they ordered); and

4. 提出投訴之實體（例如，執法人員提出某網站從事非法活動之投訴，相較於消費者主張未收到其所訂購商品之投訴，應給予較高之權重）；以及

5. Relevant legislation.

5. 相關法令。