憑證廢止清冊簽發發布點（CRL Issuing Distribution Point）

CRL Issuing Distribution Point

Partitioned CRLs MUST contain an Issuing Distribution Point extension. The distributionPoint field of the Issuing Distribution Point extension MUST be present. Additionally, the fullName field of the DistributionPointName value MUST be present, and its value MUST conform to the following requirements:

1. If a Certificate within the scope of the CRL contains a CRL Distribution Points extension, then at least one of the uniformResourceIdentifiers in the CRL Distribution Points’s fullName field MUST be included in the fullName field of the CRL’s Issuing Distribution Point extension. The encoding of the uniformResourceIdentifier value in the Issuing Distribution Point extension SHALL be byte-for-byte identical to the encoding used in the Certificate’s CRL Distribution Points extension.
2. Other GeneralNames of type uniformResourceIdentifier MAY be included.
3. Non-uniformResourceIdentifier GeneralName types MUST NOT be included.

分割式 CRL 應（MUST）包含簽發發布點（Issuing Distribution Point）擴充欄位。簽發發布點擴充欄位中的 distributionPoint 欄位應（MUST）存在。此外，DistributionPointName 欄位值中的 fullName 欄位應（MUST）存在，且其值應（MUST）符合下列要求：

1. 若 CRL 涵蓋範圍內的憑證包含 CRL 發布點（CRL Distribution Points）擴充欄位，則該擴充欄位之 fullName 欄位中的 uniformResourceIdentifier，至少有一個應（MUST）出現在 CRL 簽發發布點（Issuing Distribution Point）擴充欄位的 fullName 中。簽發發布點擴充欄位中的 uniformResourceIdentifier 值編碼應（SHALL）與該憑證 CRL 發布點擴充欄位所使用的編碼逐位元組完全相同。
2. 其他 uniformResourceIdentifier 型別的 GeneralName 得（MAY）包含。
3. 非 uniformResourceIdentifier 型別的 GeneralName 不得（MUST NOT）包含。

The indirectCRL and onlyContainsAttributeCerts fields MUST be set to FALSE (i.e., not asserted).

indirectCRL 及 onlyContainsAttributeCerts 欄位應（MUST）設為 FALSE（即不設定）。

The CA MAY set either of the onlyContainsUserCerts and onlyContainsCACerts fields to TRUE, depending on the scope of the CRL.

CA 得（MAY）依 CRL 的涵蓋範圍，將 onlyContainsUserCerts 或 onlyContainsCACerts 欄位其中之一設為 TRUE。

The CA MUST NOT assert both of the onlyContainsUserCerts and onlyContainsCACerts fields.

CA 不得（MUST NOT）同時將 onlyContainsUserCerts 及 onlyContainsCACerts 兩個欄位設定為 TRUE。

The onlySomeReasons field SHOULD NOT be included; if included, then the CA MUST provide another CRL whose scope encompasses all revocations regardless of reason code.

onlySomeReasons 欄位不宜（SHOULD NOT）包含；若包含，CA 應（MUST）另行提供一份其涵蓋範圍包括所有廢止憑證、不論其 reason code 為何的 CRL。

This extension is NOT RECOMMENDED for full and complete CRLs.

對於完整 CRL，不建議（NOT RECOMMENDED）使用此擴充欄位。