Attribute - 自定义专有名称（DN）属性类型弧 —— 设备序列号、租户标识、产品线、区域等私有属性类型

Parent node: PKI Certificate System - 公钥基础设施（PKI）证书系统子树 —— 证书策略、类型标识、私有扩展、EKU、属性与协议 (1.3.6.1.4.1.59719.5)

Technical information

Description

English:
Custom Distinguished Name (DN) attribute type arc. Defines TsingYao private attribute types carried in the certificate subject or extension fields, such as device serial number, tenant identifier, product line and region.
Registration rule: define the attribute syntax, maximum length, encoding rules and whether it is allowed in the subject for each attribute, and keep it consistent with directory attribute definitions; attributes placed in the subject become part of the certified identity and cannot be changed without reissuing the certificate.
Status: registered but unused. No private attribute type has been used in a certificate profile or directory schema; allocate identifiers in ascending order and record the syntax for each one. The unused state shall be re-verified at each revision of this file.
Recommendation: put volatile attributes (such as capability or firmware version) in private extensions (1.3.6.1.4.1.59719.5.2) rather than in the subject, because subject attributes require reissuance when they change.
See also: 1.3.6.1.4.1.59719.5.2, 1.3.6.1.4.1.59719.1.100, 1.3.6.1.4.1.59719.3.800.
Verification: 2026-10-22 — this arc and all its sub-ordinates are confirmed unused; re-verify the unused state at each revision of this file.

中文:
自定义专有名称（Distinguished Name，DN）属性类型弧。定义在证书主体或扩展字段中承载的清曜私有属性类型，如设备序列号、租户标识、产品线、区域等。
登记要求：为每个属性定义语法、最大长度、编码规则以及是否允许出现在主体中，并与目录属性定义保持一致；写入主体的属性属于被认证身份的一部分，变更必须重新签发证书。
状态：已注册但未使用。尚未有私有属性类型被用于证书模板或目录 schema；分配标识应按升序进行并逐项记录语法。本文件每次修订时须重新核验该未使用状态。
建议：易变属性（如能力、固件版本）应放在私有扩展（1.3.6.1.4.1.59719.5.2）中而非主体中，因为主体属性变更需要重新签发证书。
关联节点：1.3.6.1.4.1.59719.5.2、1.3.6.1.4.1.59719.1.100、1.3.6.1.4.1.59719.3.800。
核验：2026-10-22 —— 本弧及其全部下级标识均确认未使用，本文件每次修订时须重新核验该未使用状态。

Registration Authority

tsingyao
E-Mail: op@tsingyao.net
JunQing Gu
TsingYao Technology Limited

The RA does not want to publish their personal information.

Subordinate objects

Alternative Identifiers

RDAP
OID-IP: Text, JSON, XML (Documentation)
REST API (Documentation)