稽核頻率或評估事項

Frequency or circumstances of assessment

Certificates that are capable of being used to issue new certificates MUST either be Technically Constrained in line with Section 7.1.2.3, Section 7.1.2.4, or Section 7.1.2.5, as well as audited in line with Section 8.7 only, or Unconstrained and fully audited in line with all remaining requirements from this section. A Certificate is deemed as capable of being used to issue new certificates if it contains an X.509v3 basicConstraints extension, with the cA boolean set to TRUE and is therefore by definition a Root CA Certificate or a Subordinate CA Certificate.

具備簽發新憑證能力之憑證，應（MUST）符合下列兩者之一：依第 7.1.2.3 節、第 7.1.2.4 節或第 7.1.2.5 節之規定受技術約束，且僅依第 8.7 節之規定接受稽核；或未受技術約束，並依本節其餘所有要求接受完整稽核。憑證若包含 X.509v3 basicConstraints 擴充欄位，且 cA 布林值設為 TRUE，則視為具備簽發新憑證之能力，因此依定義屬於根憑證機構（Root CA）憑證或下屬憑證機構（Subordinate CA）憑證。

The period during which the CA issues Certificates SHALL be divided into an unbroken sequence of audit periods. An audit period MUST NOT exceed one year in duration.

憑證機構（Certification Authority，CA）簽發憑證之期間，應（SHALL）劃分為連續且不中斷的稽核期間（Audit Period）。每一個稽核期間不得（MUST NOT）超過一年。

If the CA has a currently valid Audit Report indicating compliance with an audit scheme listed in Section 8.4, then no pre-issuance readiness assessment is necessary.

若 CA 持有現行有效的稽核報告（Audit Report），且該報告表明其遵循第 8.4 節所列之稽核架構（audit scheme），則無需進行簽發前的整備程度評估。