預簽憑證(Precertificate)剖繪之擴充欄位-直接簽發(Directly Issued)
Precertificate Profile Extensions - Directly Issued
These extensions apply in the context of a Precertificate directly issued from a CA, and not from a Precertificate Signing CA Certificate, as defined in Section 7.1.2.4.
這些擴充欄位適用於由 CA 直接簽發之預簽憑證,而不適用於使用第 7.1.2.4 節所定義之預簽憑證簽章憑證機構(Precertificate Signing CA)憑證所簽發之預簽憑證。
Extension Presence Critical Description Precertificate Poison (OID: 1.3.6.1.4.1.11129.2.4.3) MUST Y See Section 7.1.2.9.3 Signed Certificate Timestamp List MUST NOT - Any other extension * * The order, criticality, and encoded values of all other extensions MUST be byte-for-byte identical to the extensionsfield of the Certificate
| 擴充欄位 | 必要性 | 關鍵性 | 說明 |
|---|---|---|---|
| Precertificate Poison(OID:1.3.6.1.4.1.11129.2.4.3) | 應(MUST) | Y | 參見第 7.1.2.9.3 節 |
| Signed Certificate Timestamp(SCT)清單 | 不得(MUST NOT) | - | |
| 任何其他擴充欄位 | * | * | 所有其他擴充欄位之順序、關鍵性及編碼後之值應(MUST)與有效憑證之 extensions 欄位逐位元組完全相同。 |
Note: This requirement is expressing that if the Precertificate Poison extension is removed from the Precertificate, and the Signed Certificate Timestamp List is removed from the certificate, the contents of the
extensionsfield MUST be byte-for-byte identical to the Certificate.
注意:本項要求係指:若自預簽憑證中移除 Precertificate Poison 擴充欄位,並自有效憑證中移除 Signed Certificate Timestamp(SCT)清單擴充欄位,則預簽憑證之 extensions 欄位內容與有效憑證之 extensions 欄位內容應(MUST)逐位元組完全相同。