7.1.2.9.2 已翻譯 對應原文版本:2.3.0
預簽憑證(Precertificate)剖繪之擴充欄位-預簽憑證憑證機構簽發(Precertificate CA Issued)
Precertificate Profile Extensions - Precertificate CA Issued
These extensions apply in the context of a Precertificate from a Precertificate Signing CA Certificate, as defined in Section 7.1.2.4. For such Precertificates, the
authorityKeyIdentifier, if present in the Certificate, is modified in the Precertificate, as described in RFC 6962, Section 3.2.
這些擴充欄位適用於使用第 7.1.2.4 節所定義之預簽憑證簽章憑證機構(Precertificate Signing CA)憑證所簽發之預簽憑證。對於此類預簽憑證,若有效憑證中存在 authorityKeyIdentifier,則預簽憑證中的 authorityKeyIdentifier 會依 RFC 6962 第 3.2 節 所述予以修改。
Extension Presence Critical Description Precertificate Poison (OID: 1.3.6.1.4.1.11129.2.4.3) MUST Y See Section 7.1.2.9.3 authorityKeyIdentifier* * See Section 7.1.2.9.4 Signed Certificate Timestamp List MUST NOT - Any other extension * * The order, criticality, and encoded values of all other extensions MUST be byte-for-byte identical to the extensionsfield of the Certificate
| 擴充欄位 | 必要性 | 關鍵性 | 說明 |
|---|---|---|---|
| Precertificate Poison(OID:1.3.6.1.4.1.11129.2.4.3) | 應(MUST) | Y | 參見第 7.1.2.9.3 節 |
authorityKeyIdentifier | * | * | 參見第 7.1.2.9.4 節 |
| Signed Certificate Timestamp(SCT)清單 | 不得(MUST NOT) | - | |
| 任何其他擴充欄位 | * | * | 所有其他擴充欄位之順序、關鍵性及編碼後之值應(MUST)與有效憑證之 extensions 欄位逐位元組完全相同。 |