7.1.2.9.2 已翻譯 對應原文版本:2.3.0

預簽憑證(Precertificate)剖繪之擴充欄位-預簽憑證憑證機構簽發(Precertificate CA Issued)

跳至原文

Precertificate Profile Extensions - Precertificate CA Issued

These extensions apply in the context of a Precertificate from a Precertificate Signing CA Certificate, as defined in Section 7.1.2.4. For such Precertificates, the authorityKeyIdentifier, if present in the Certificate, is modified in the Precertificate, as described in RFC 6962, Section 3.2.

這些擴充欄位適用於使用第 7.1.2.4 節所定義之預簽憑證簽章憑證機構(Precertificate Signing CA)憑證所簽發之預簽憑證。對於此類預簽憑證,若有效憑證中存在 authorityKeyIdentifier,則預簽憑證中的 authorityKeyIdentifier 會依 RFC 6962 第 3.2 節 所述予以修改。

ExtensionPresenceCriticalDescription
Precertificate Poison (OID: 1.3.6.1.4.1.11129.2.4.3)MUSTYSee Section 7.1.2.9.3
authorityKeyIdentifier**See Section 7.1.2.9.4
Signed Certificate Timestamp ListMUST NOT-
Any other extension**The order, criticality, and encoded values of all other extensions MUST be byte-for-byte identical to the extensions field of the Certificate
擴充欄位必要性關鍵性說明
Precertificate Poison(OID:1.3.6.1.4.1.11129.2.4.3)應(MUST)Y參見第 7.1.2.9.3 節
authorityKeyIdentifier**參見第 7.1.2.9.4 節
Signed Certificate Timestamp(SCT)清單不得(MUST NOT)-
任何其他擴充欄位**所有其他擴充欄位之順序、關鍵性及編碼後之值應(MUST)與有效憑證之 extensions 欄位逐位元組完全相同。