6.3.2 已翻譯 對應原文版本:2.3.0

憑證效期與金鑰對使用期間

跳至原文

Certificate operational periods and key pair usage periods

Subscriber Certificates issued before 2026-03-15 SHOULD NOT have a Validity Period greater than 397 days and MUST NOT have a Validity Period greater than 398 days.

於 2026-03-15 前簽發之用戶憑證(Subscriber Certificate),其有效期限(Validity Period)不宜(SHOULD NOT)超過 397 日,且不得(MUST NOT)超過 398 日。

Subscriber Certificates issued on or after 2026-03-15 and before 2027-03-15 SHOULD NOT have a Validity Period greater than 199 days and MUST NOT have a Validity Period greater than 200 days.

於 2026-03-15 當日或之後、2027-03-15 前簽發之用戶憑證,其有效期限不宜(SHOULD NOT)超過 199 日,且不得(MUST NOT)超過 200 日。

Subscriber Certificates issued on or after 2027-03-15 and before 2029-03-15 SHOULD NOT have a Validity Period greater than 99 days and MUST NOT have a Validity Period greater than 100 days.

於 2027-03-15 當日或之後、2029-03-15 前簽發之用戶憑證,其有效期限不宜(SHOULD NOT)超過 99 日,且不得(MUST NOT)超過 100 日。

Subscriber Certificates issued on or after 2029-03-15 SHOULD NOT have a Validity Period greater than 46 days and MUST NOT have a Validity Period greater than 47 days.

於 2029-03-15 當日或之後簽發之用戶憑證,其有效期限不宜(SHOULD NOT)超過 46 日,且不得(MUST NOT)超過 47 日。

Reference for maximum Validity Periods of Subscriber Certificates
Certificate issued on or afterCertificate issued beforeMaximum Validity Period
2026-03-15398 days
2026-03-152027-03-15200 days
2027-03-152029-03-15100 days
2029-03-1547 days
用戶憑證最長有效期限之參考表格
憑證於此日或之後簽發憑證於此日前簽發憑證有效期之最長期限
2026-03-15398 日
2026-03-152027-03-15200 日
2027-03-152029-03-15100 日
2029-03-1547 日

For the purpose of calculations, a day is measured as 86,400 seconds. Any amount of time greater than this, including fractional seconds and/or leap seconds, shall represent an additional day. For this reason, Subscriber Certificates SHOULD NOT be issued for the maximum permissible time by default, in order to account for such adjustments.

計算時,1 日以 86,400 秒計。任何超出此時間之時間長度,包括不足 1 秒及/或閏秒,均視為額外的 1 日。因此,為因應此類調整,用戶憑證不宜(SHOULD NOT)預設以規定所允許之最大天數簽發。