簽章演算法識別碼（Signature AlgorithmIdentifier）

Signature AlgorithmIdentifier

All objects signed by a CA Private Key MUST conform to these requirements on the use of the AlgorithmIdentifier or AlgorithmIdentifier-derived type in the context of signatures.

所有使用 CA 私密金鑰（Private Key）簽章之物件，應（MUST）符合本節有關 AlgorithmIdentifier 或 AlgorithmIdentifier 衍生型別於簽章情境下使用的要求規定。

In particular, it applies to all of the following objects and fields:

• The signatureAlgorithm field of a Certificate or Precertificate.
• The signature field of a TBSCertificate (for example, as used by either a Certificate or Precertificate).
• The signatureAlgorithm field of a CertificateList
• The signature field of a TBSCertList
• The signatureAlgorithm field of a BasicOCSPResponse.

具體而言，本節要求規定適用於下列所有物件及欄位：

• 有效憑證或預簽憑證的 signatureAlgorithm 欄位。
• TBSCertificate 的 signature 欄位（例如有效憑證或預簽憑證所使用的 TBSCertificate）。
• CertificateList 的 signatureAlgorithm 欄位。
• TBSCertList 的 signature 欄位。
• BasicOCSPResponse 的 signatureAlgorithm 欄位。

No other encodings are permitted for these fields.

上述欄位不得使用其他編碼方式。