交互認證之下屬憑證機構(Cross-Certified Subordinate CA)之填名(Naming)
Cross-Certified Subordinate CA Naming
The
subjectMUST comply with the requirements of Section 7.1.4, or, if the existing CA Certificate was issued in compliance with the then-current version of the Baseline Requirements, the encodedsubjectname MUST be byte-for-byte identical to the encodedsubjectname of the existing CA Certificate.
subject 應(MUST)遵循第 7.1.4 節之要求;或者,若既有 CA 憑證係遵循當時有效版本之《基本要求》所簽發,則編碼後的 subject 名稱應(MUST)與既有 CA 憑證之編碼後的 subject 名稱逐位元組完全相同。
Note: The above exception allows the CAs to issue Cross-Certified Subordinate CA Certificates, provided that the existing CA Certificate complied with the Baseline Requirements in force at time of issuance. This allows the requirements of Section 7.1.4 to be improved over time, while still permitting Cross-Certification. If the existing CA Certificate did not comply, issuing a Cross-Certificate is not permitted.
注意:上述「編碼後逐位元組完全相同」之例外,允許 CA 在既有 CA 憑證遵循其簽發當時有效之《基本要求》的前提下,簽發交互認證之下屬憑證機構(Cross-Certified Subordinate CA)憑證。此例外使第 7.1.4 節之要求得以隨時間持續改進,同時仍允許進行交互認證。若既有 CA 憑證不遵循其簽發當時有效之《基本要求》,則不得簽發交互憑證。