Policy EV SSL - 扩展验证（EV）SSL 证书策略 —— 最严格审核机制，核验域名、组织合法状态与授权资质

Go back Parent node: Cert Policy - 证书策略（CP）子树 —— 规定所签发证书的适用范围、安全要求与签发/续期/吊销/审计约束 (1.3.6.1.4.1.59719.5.1)

Technical information

Dot notation:	`1.3.6.1.4.1.59719.5.1.120`
ASN.1 notation:	`{ iso(1) identified-organization(3) dod(6) internet(1) private(4) enterprise(1) tsingyao(59719) pki-certificate-system(5) cert-policy(1) policy-ev-ssl(120) }`
OID-IRI notation:	`/ISO/Identified-Organization/6/1/4/1/TsingYao/PKICertificateSystem/CertPolicy/PolicyEvSsl`
WEID notation:	`weid:P-1A2V-5-1-3C-6`
DER encoding:	`06:0B:2B:06:01:04:01:83:D2:47:05:01:78`

Description

English:
Extended Validation (EV) Secure Sockets Layer (SSL) certificate policy. This policy defines the configuration rules for EV SSL certificates and adopts the strictest review mechanism, verifying domain ownership as well as the legal status, physical existence and authorization qualification of the organization; it applies to issuing and managing EV SSL certificates for high-trust website encrypted communication.
Recommended handling: complete the rigorous organizational review procedures, retain supporting documents, and monitor the certificate validity period.
Status: registered but unused. No certificate has been issued under this policy; when activated, keep the full validation evidence package and revalidate whenever the organization information changes. The unused state shall be re-verified at each revision of this file.
Recommendation: EV issuance shall follow the CA/Browser Forum EV Guidelines; any deviation shall be documented in the CPS, otherwise the certificates may lose their intended public trust treatment.
See also: 1.3.6.1.4.1.59719.5.1.120.1, 1.3.6.1.4.1.59719.5.120, 1.3.6.1.4.1.59719.5.1.2.
Verification: 2026-10-22 — this arc and all its sub-ordinates are confirmed unused; re-verify the unused state at each revision of this file.

中文:
扩展验证（Extended Validation，EV）安全套接层（Secure Sockets Layer，SSL）证书策略。本策略定义 EV SSL 证书的配置规则，采用最严格的审核机制，核验域名所有权以及组织合法状态、实体存续性与授权资质，用于签发和管理高可信网站加密通信所用的 EV SSL 证书。
处理建议：完成严格的组织审核流程，留存佐证材料，监控证书有效期。
状态：已注册但未使用。尚未按本策略签发任何证书；启用时应完整留存验证佐证包，并在组织信息变更时重新核验。本文件每次修订时须重新核验该未使用状态。
建议：EV 签发应遵循 CA/Browser Forum EV 规范；任何偏离均应在 CPS 中记载，否则证书可能无法获得预期的公共信任待遇。
关联节点：1.3.6.1.4.1.59719.5.1.120.1、1.3.6.1.4.1.59719.5.120、1.3.6.1.4.1.59719.5.1.2。
核验：2026-10-22 —— 本弧及其全部下级标识均确认未使用，本文件每次修订时须重新核验该未使用状态。

Registration Authority

tsingyao
E-Mail: op@tsingyao.net
JunQing Gu
TsingYao Technology Limited

The RA does not want to publish their personal information.

Subordinate objects

ID	Base36	ASN.1 IDs (comma sep.)	IRI IDs (comma sep.)	RA	Comment	Created	Updated
1	1	policy-ev-ssl-v1	PolicyEvSslV1	tsingyao

Alternative Identifiers

Identifier	Description
aid:D276000186B200054278A5EC3DD9D93B (No PIX allowed)	OIDplus Information Object Application Identifier (ISO/IEC 7816)
guid:4278a5ec-0000-8000-a6d3-1d041218eb37	OIDplus Information Object Custom UUID (RFC 9562)
guid:6e53d73c-6c4a-31cf-8f68-1ec6cb9bbc7b	Name based version 3 / MD5 UUID with namespace UUID_NAMEBASED_NS_OID
guid:e2452c4f-19c6-5c21-a7ae-b0444e8be251	Name based version 5 / SHA1 UUID with namespace UUID_NAMEBASED_NS_OID
mac:82-86-BD-D9-D9-3B	OIDplus Information Object MAC address, Unicast (AAI)
mac:83-86-BD-D9-D9-3B	OIDplus Information Object MAC address, Multicast (AAI)
weid:P-1A2V-5-1-3C-6	WEID notation
x500dn:/dc=com/dc=example/cn=oidplus/1.3.6.1.4.1.37476.2.5.2.9.4.1=1115203052/1.3.6.1.4.1.37476.2.5.2.9.4.2=1037687099	OIDplus Information Object X.500 DN