網域驗證型（DV）用戶憑證剖繪

Domain Validated

For a Subscriber Certificate to be Domain Validated, it MUST meet the following profile:

若用戶憑證屬於網域驗證型（Domain Validated）憑證，應（MUST）符合下列剖繪：

Field	Requirements
subject	See following table.
certificatePolicies	MUST be present. MUST assert the Reserved Certificate Policy Identifier of 2.23.140.1.2.1 as a policyIdentifier. See Section 7.1.2.7.9.
All other extensions	See Section 7.1.2.7.6

All subject names MUST be encoded as specified in Section 7.1.4.

所有 subject 名稱應（MUST）依第 7.1.4 節規定之方式編碼。

The following table details the acceptable AttributeTypes that may appear within the type field of an AttributeTypeAndValue, as well as the contents permitted within the value field.

下表列出 AttributeTypeAndValue 之 type 欄位允許使用的 AttributeType，以及對應之 value 欄位允許填列的內容。

Domain Validated subject Attributes

Attribute Name	Presence	Value	Verification
countryName	MAY	The two-letter ISO 3166-1 country code for the country associated with the Subject.	Section 3.2.2.3
commonName	NOT RECOMMENDED	If present, MUST contain a value derived from the subjectAltName extension according to Section 7.1.4.3.
Any other attribute	MUST NOT	-	-