Cert Policy - 证书策略（CP）子树 —— 规定所签发证书的适用范围、安全要求与签发/续期/吊销/审计约束

Go back Parent node: PKI Certificate System - 公钥基础设施（PKI）证书系统子树 —— 证书策略、类型标识、私有扩展、EKU、属性与协议 (1.3.6.1.4.1.59719.5)

Technical information

Dot notation:	`1.3.6.1.4.1.59719.5.1`
ASN.1 notation:	`{ iso(1) identified-organization(3) dod(6) internet(1) private(4) enterprise(1) tsingyao(59719) pki-certificate-system(5) cert-policy(1) }`
OID-IRI notation:	`/ISO/Identified-Organization/6/1/4/1/TsingYao/PKICertificateSystem/CertPolicy`
WEID notation:	`weid:P-1A2V-5-1-2`
DER encoding:	`06:0A:2B:06:01:04:01:83:D2:47:05:01`

Description

English:
Certificate Policy (CP) subtree. A certificate policy defines the rules, requirements, security controls and applicability for certificates issued under it, including subject identity verification, key protection, issuance, renewal, revocation and audit requirements.
Policy rule: is carried in the certificatePolicies extension, and the specific version is defined by the child node with the -v1 suffix; issuing certificates under a policy without a versioned child node is not recommended because the applicable rules cannot be identified precisely.
Status: registered but unused. No certificate has been issued under any policy in this subtree; allocate a policy number only when the CPS text for that policy is ready. The unused state shall be re-verified at each revision of this file.
Recommendation: keep one policy per validation level and usage combination, and never reuse a policy number for a different purpose; when a policy changes incompatibly, allocate a new version node rather than editing the semantics in place.
See also: 1.3.6.1.4.1.59719.5.1.1, 1.3.6.1.4.1.59719.5.1.100, 1.3.6.1.4.1.59719.5.
Verification: 2026-10-22 — this arc and all its sub-ordinates are confirmed unused; re-verify the unused state at each revision of this file.

中文:
证书策略（Certificate Policy，CP）子树。证书策略规定本策略下所签发证书的适用范围、安全要求与约束规则，包含主体身份核验、密钥保护、签发、续期、吊销与审计要求。
策略标识承载于证书策略扩展（certificatePolicies）中，具体版本由带 -v1 后缀的子节点定义；不建议在无版本子节点的情况下签发证书，因为无法精确识别适用规则。
状态：已注册但未使用。本子树下尚未按任何策略签发证书；应在该策略的 CPS 文本就绪后才分配策略号。本文件每次修订时须重新核验该未使用状态。
建议：一个验证等级与用途组合对应一个策略，策略号不得改作他用；策略发生不兼容变更时应新增版本节点，而不是原地修改语义。
关联节点：1.3.6.1.4.1.59719.5.1.1、1.3.6.1.4.1.59719.5.1.100、1.3.6.1.4.1.59719.5。
核验：2026-10-22 —— 本弧及其全部下级标识均确认未使用，本文件每次修订时须重新核验该未使用状态。

Registration Authority

tsingyao
E-Mail: op@tsingyao.net
JunQing Gu
TsingYao Technology Limited

The RA does not want to publish their personal information.

Subordinate objects

ID	Base36	ASN.1 IDs (comma sep.)	IRI IDs (comma sep.)	RA
1	1	policy-auto-issue	PolicyAutoIssue	tsingyao
2	2	policy-auto-issue-ext	PolicyAutoIssueExt	tsingyao
100	2S	policy-dv-ssl	PolicyDvSsl	tsingyao
105	2X	policy-iv-ssl	PolicyIvSsl	tsingyao
110	32	policy-ov-ssl	PolicyOvSsl	tsingyao
120	3C	policy-ev-ssl	PolicyEvSsl	tsingyao
200	5K	policy-code-signing	PolicyCodeSigning	tsingyao
210	5U	policy-timestamping	PolicyTimestamping	tsingyao
220	64	policy-mail	PolicyMail	tsingyao
230	6E	policy-device	PolicyDevice	tsingyao
600	GO	policy-ocsp-signing	PolicyOcspSigning	tsingyao
800	M8	policy-end-user	PolicyEndUser	tsingyao

Alternative Identifiers

Identifier	Description
aid:D276000186B200054278A5EC2DB44ADA (No PIX allowed)	OIDplus Information Object Application Identifier (ISO/IEC 7816)
aid:D276000186F62B0601040183D2470501 (No PIX allowed)	Application Identifier (ISO/IEC 7816)
guid:4278a5ec-0000-8000-a6d3-0d623aa932f7	OIDplus Information Object Custom UUID (RFC 9562)
guid:751b50db-5ba6-3bef-b85b-c1311934f276	Name based version 3 / MD5 UUID with namespace UUID_NAMEBASED_NS_OID
guid:4e3fcb5f-60cd-51b2-81b7-838ac1cc2729	Name based version 5 / SHA1 UUID with namespace UUID_NAMEBASED_NS_OID
mac:12-2A-2D-B4-4A-DA	OIDplus Information Object MAC address, Unicast (AAI)
mac:13-2A-2D-B4-4A-DA	OIDplus Information Object MAC address, Multicast (AAI)
weid:P-1A2V-5-1-2	WEID notation
x500dn:/dc=com/dc=example/cn=oidplus/1.3.6.1.4.1.37476.2.5.2.9.4.1=1115203052/1.3.6.1.4.1.37476.2.5.2.9.4.2=766790362	OIDplus Information Object X.500 DN