OCSP 回應伺服器（OCSP Responder）之憑證機構資訊存取（Authority Information Access）

OCSP Responder Authority Information Access

For OCSP Responder certificates, this extension is NOT RECOMMENDED, as the Relying Party should already possess the necessary information. In order to validate the given Responder certificate, the Relying Party must have access to the Issuing CA’s certificate, eliminating the need to provide id-ad-caIssuers. Similarly, because of the requirement for an OCSP Responder certificate to include the id-pkix-ocsp-nocheck extension, it is not necessary to provide id-ad-ocsp, as such responses will not be checked by Relying Parties.

對於 OCSP 回應伺服器憑證，本擴充欄位不建議（NOT RECOMMENDED）使用，因信賴憑證者（Relying Party）應已具備必要資訊。信賴憑證者須能取得簽發憑證機構（Issuing CA）之憑證，方能驗證該回應伺服器憑證，因此無需提供 id-ad-caIssuers。同樣地，由於 OCSP 回應伺服器憑證須包含 id-pkix-ocsp-nocheck 擴充欄位，信賴憑證者不會檢查此類 OCSP 回應，因此亦無需提供 id-ad-ocsp。

If present, the AuthorityInfoAccessSyntax MUST contain one or more AccessDescriptions. Each AccessDescription MUST only contain a permitted accessMethod, as detailed below, and each AuthorityInfoAccessSyntax MUST contain all required AccessDescriptions.

若存在，AuthorityInfoAccessSyntax 應（MUST）包含一個或多個 AccessDescription。每個 AccessDescription 應（MUST）僅包含下表所列之允許 accessMethod，且每個 AuthorityInfoAccessSyntax 應（MUST）包含所有要求的 AccessDescription。

Access Method	Access Location	Presence	Maximum	Description
id-ad-ocsp (OID: 1.3.6.1.5.5.7.48.1)	uniformResourceIdentifier	NOT RECOMMENDED	*	A HTTP URL of the Issuing CA’s OCSP responder.
Any other value	-	MUST NOT	-	No other accessMethods may be used.