Move to main content

Citizen Digital Certificate

 
:::
Index FAQ

FAQ

What is the frequency of CRL issuance?
The Interior Ministry Citizen Digital Certificate CA daily issues one complete CRL and delta CRL.
How to download CRL information?
  1. You can manually download from the Repository web page of the Interior Ministry CA.
  2. Using HTTP protocol programming, you can download from Interior Ministry CA Directory Server website: http://moica.nat.gov.tw
What are the CRL inspection procedures?
  1. Download CRL
  2. Download the issued CA certificate CRL
  3. Authenticate CRL signature
  4. Determine the effective CRL time
  5. Get certificate revocation status
Refer to exemplary instructions on related programs.
How to get the Interior Ministry CA certificate?
Go to download from the Interior Ministry CA website Repository.
Will the suspended certificate recorded in the CRL? How to tell whether the certificate is being suspended or revoked?
The suspended certificate would still be recorded in the CRL. You can tell by its numbers: 6 represents Suspension and 5 represents Revocation.
Is there any fee for accessing OCSP?
Access to OCSP service is free.
What are the OCSP inspection procedures?
  1. Prepare the OCSP query data structure (get the access certificate serial number)
  2. Create the OCSP query data structure (BuildTobesignedOCSPRequest0)
  3. Send out the OCSP query data structure and retrieve query results (QueryOCSPfromOCSPRequest0)
  4. The Interior Ministry Citizen Digital Certificate OCSP server address is http://moica.nat.gov.tw
Refer to exemplary instructions on related programs and parameters.
If A wants to check B's certificate status, whose certificate it is for the certificate of one who signed the query?
If A wants to check B's certificate status, then the signed certificate is A.
What are the Time-Stamping Service Procedures provided by the Interior Ministry? What is the server address? What are the port numbers?
  1. Prepare for signed time-stamping packet (makeSignedTSReq0).
  2. Upload time-stamping service request to time-stamping service server (requestTST0).
  3. Time-Stamping Server Internet Site http://210.241.69.145 and the port number is 80.
  4. Verify Time-Stamping Response is effective or not (verifyTST0).
  5. Choose your needed response message.
Refer to exemplary instructions on related programs and parameters.
What is the Interior Ministry Directory Service Server Website? How many port numbers are there?
The Directory Server website: http://moica.nat.gov.tw the port number is 389.
What methods are provided by the Interior Ministry Directory Service to query certificate information?
The Interior Ministry Directory Service provides Citizen Digital Certificate Subject Name Serial Number, Name (UTF-8 code), complete LDAP DN certificate query information for you to download complete and delta CRLs.