7.1.2.9.1 已翻譯 對應原文版本:2.3.0

預簽憑證(Precertificate)剖繪之擴充欄位-直接簽發(Directly Issued)

跳至原文

Precertificate Profile Extensions - Directly Issued

These extensions apply in the context of a Precertificate directly issued from a CA, and not from a Precertificate Signing CA Certificate, as defined in Section 7.1.2.4.

這些擴充欄位適用於由 CA 直接簽發之預簽憑證,而不適用於使用第 7.1.2.4 節所定義之預簽憑證簽章憑證機構(Precertificate Signing CA)憑證所簽發之預簽憑證。

ExtensionPresenceCriticalDescription
Precertificate Poison (OID: 1.3.6.1.4.1.11129.2.4.3)MUSTYSee Section 7.1.2.9.3
Signed Certificate Timestamp ListMUST NOT-
Any other extension**The order, criticality, and encoded values of all other extensions MUST be byte-for-byte identical to the extensions field of the Certificate
擴充欄位必要性關鍵性說明
Precertificate Poison(OID:1.3.6.1.4.1.11129.2.4.3)應(MUST)Y參見第 7.1.2.9.3 節
Signed Certificate Timestamp(SCT)清單不得(MUST NOT)-
任何其他擴充欄位**所有其他擴充欄位之順序、關鍵性及編碼後之值應(MUST)與有效憑證之 extensions 欄位逐位元組完全相同。

Note: This requirement is expressing that if the Precertificate Poison extension is removed from the Precertificate, and the Signed Certificate Timestamp List is removed from the certificate, the contents of the extensions field MUST be byte-for-byte identical to the Certificate.

注意:本項要求係指:若自預簽憑證中移除 Precertificate Poison 擴充欄位,並自有效憑證中移除 Signed Certificate Timestamp(SCT)清單擴充欄位,則預簽憑證之 extensions 欄位內容與有效憑證之 extensions 欄位內容應(MUST)逐位元組完全相同。