Policy IV SSL - 个人验证（IV）SSL 证书策略 —— 清曜自定义验证等级，在域名控制之外核验订户个人真实身份

Parent node: Cert Policy - 证书策略（CP）子树 —— 规定所签发证书的适用范围、安全要求与签发/续期/吊销/审计约束 (1.3.6.1.4.1.59719.5.1)

Technical information

Description

English:
Individual Validation (IV) Secure Sockets Layer (SSL) certificate policy. This policy governs IV SSL server certificates and requires the Certification Authority (CA) to validate both the domain control of the Fully Qualified Domain Name (FQDN) and the real identity of the individual subscriber through government-issued identity documents, so as to confirm the legitimacy of the individual operating the website and provide authenticated encrypted Transport Layer Security (TLS) communication.
Note: Individual Validation (IV) is a TsingYao proprietary validation level that is not defined by the CA/Browser Forum Baseline Requirements; its scope of application and reliance restrictions shall be stated in the Certification Practice Statement (CPS). This policy follows the general control requirements of the CA/Browser Forum Baseline Requirements and defines issuance, renewal, revocation and audit requirements.
Status: registered but unused. No certificate has been issued under this policy; before first issuance, publish the CPS section describing the IV validation procedure and the reliance limits, and consider whether the certificate will be publicly trusted. The unused state shall be re-verified at each revision of this file.
Recommendation: because IV is not a publicly recognised validation level, do not present it as equivalent to OV or EV in product documentation, and keep the private validation level extension consistent with the certificate policy (1.3.6.1.4.1.59719.5.2).
See also: 1.3.6.1.4.1.59719.5.105, 1.3.6.1.4.1.59719.5.1.110, 1.3.6.1.4.1.59719.5.2.
Verification: 2026-10-22 — this arc and all its sub-ordinates are confirmed unused; re-verify the unused state at each revision of this file.

中文:
个人验证（Individual Validation，IV）安全套接层（Secure Sockets Layer，SSL）证书策略。本策略适用于 IV SSL 服务器证书，要求证书颁发机构（Certification Authority，CA）验证完全限定域名（Fully Qualified Domain Name，FQDN）的域名控制权，并依托法定身份证件核验订户个人真实身份，确认网站运营个人主体合法性，提供经过身份认证的传输层安全（Transport Layer Security，TLS）加密通信。
说明：个人验证（IV）为清曜自定义验证等级，并非 CA/Browser Forum 基线要求定义的级别，其适用范围与信赖限制应在认证业务声明（CPS）中明确。本策略遵循 CA/Browser Forum 基线要求的通用控制要求，规定 IV SSL 证书的签发、更新、吊销与审计要求。
状态：已注册但未使用。尚未按本策略签发任何证书；首次签发前应发布描述 IV 验证流程与信赖限制的 CPS 章节，并确认该证书是否面向公共信任场景。本文件每次修订时须重新核验该未使用状态。
建议：由于 IV 并非公共认可的验证等级，产品文档中不得将其等同于 OV 或 EV；私有验证等级扩展应与证书策略（1.3.6.1.4.1.59719.5.2）保持一致。
关联节点：1.3.6.1.4.1.59719.5.105、1.3.6.1.4.1.59719.5.1.110、1.3.6.1.4.1.59719.5.2。
核验：2026-10-22 —— 本弧及其全部下级标识均确认未使用，本文件每次修订时须重新核验该未使用状态。

Registration Authority

tsingyao
E-Mail: op@tsingyao.net
JunQing Gu
TsingYao Technology Limited

The RA does not want to publish their personal information.

Subordinate objects

Alternative Identifiers

RDAP
OID-IP: Text, JSON, XML (Documentation)
REST API (Documentation)