7.1.2 已翻譯對應原文版本：2.3.0

憑證內容與擴充欄位

Certificate Content and Extensions

If the CA asserts compliance with these Baseline Requirements, all certificates that it issues MUST comply with one of the following Certificate Profiles, which incorporate, and are derived from RFC 5280. Except as explicitly noted, all normative requirements imposed by RFC 5280 shall apply, in addition to the normative requirements imposed by this document. CAs SHOULD examine RFC 5280, Appendix B for further issues to be aware of.

若憑證機構（Certification Authority，CA）聲明其遵循本《基本要求》規定，則其所簽發之所有憑證應（MUST）遵循下列其中一種憑證剖繪（Certificate Profiles）；該等憑證剖繪引用 RFC 5280 之相關規定，並以其為基礎衍生。除非另有明確說明，除本文件所規定之規範性要求外，RFC 5280 所定之所有規範性要求亦適用。CA 宜（SHOULD）參閱 RFC 5280 附錄 B，以瞭解其他應注意事項。

CA Certificates

Section 7.1.2.1 - Root CA Certificate Profile

Subordinate CA Certificates

Cross Certificates

Section 7.1.2.2 - Cross-Certified Subordinate CA Certificate Profile

Technically Constrained CA Certificates

Section 7.1.2.3 - Technically-Constrained Non-TLS Subordinate CA Certificate Profile

Section 7.1.2.4 - Technically-Constrained Precertificate Signing CA Certificate Profile

Section 7.1.2.5 - Technically-Constrained TLS Subordinate CA Certificate Profile

Section 7.1.2.6 - TLS Subordinate CA Certificate Profile

Section 7.1.2.7 - Subscriber (End-Entity) Certificate Profile

Section 7.1.2.8 - OCSP Responder Certificate Profile

Section 7.1.2.9 - Precertificate Profile

憑證機構（CA）憑證
- 第 7.1.2.1 節－根憑證機構（Root CA）憑證剖繪
- 下屬憑證機構憑證（Subordinate CA Certificates）
  - 交互憑證（Cross Certificates）
    - 第 7.1.2.2 節－交互認證之下屬憑證機構（Cross-Certified Subordinate CA）憑證剖繪
  - 受技術約束之憑證機構憑證（Technically Constrained CA Certificates）
    - 第 7.1.2.3 節－受技術約束之非 TLS 下屬憑證機構（Technically-Constrained Non-TLS Subordinate CA）憑證剖繪
    - 第 7.1.2.4 節－受技術約束之預簽憑證簽章憑證機構（Technically-Constrained Precertificate Signing CA）憑證剖繪
    - 第 7.1.2.5 節－受技術約束之 TLS 下屬憑證機構（Technically-Constrained TLS Subordinate CA）憑證剖繪
  - 第 7.1.2.6 節－TLS 下屬憑證機構（TLS Subordinate CA）憑證剖繪
第 7.1.2.7 節－用戶（終端個體）（Subscriber (End-Entity)）憑證剖繪
第 7.1.2.8 節－OCSP 回應伺服器（OCSP Responder）憑證剖繪
第 7.1.2.9 節－預簽憑證（Precertificate）剖繪