GB/T 26855-2011 in English

《GB/T 26855-2011信息安全技术 公钥基础设施 证书策略与认证业务声明框架》由TC260（全国网络安全标准化技术委员会）归口，主管部门为国家标准化管理委员会。

Scope

This standard specifies the concepts of certificate policy (CP) and certification business statement (CPS), explains the differences between them, and specifies the document title framework that CP and CPS should abide by together, including the information that should be included in the title type. The framework proposed in this standard generally assumes the use of GB/T 16264.8-2005 certificate format, but it does not mean that the framework is limited to the use of this certificate format. This framework can also be used for certificates in other formats. This standard applies to the writing and comparison of CP and CPS. The framework given in this standard should be used as a flexible tool to justify the topics to be considered in a particular CP or CPS, rather than as a fixed formula for generating a CP or CPS. This International Standard does not apply to the definition of general security policies, such as organizational security policies, system security policies, or data labeling policies.