Policy Auto Issue - 证书自动签发策略 —— 定义 CA 免人工审核自动签发证书的条件、核验要求与审计要求

Zurückkehren Übergeordnet: Cert Policy - 证书策略（CP）子树 —— 规定所签发证书的适用范围、安全要求与签发/续期/吊销/审计约束 (1.3.6.1.4.1.59719.5.1)

Technische Informationen

Punkt-Notation:	`1.3.6.1.4.1.59719.5.1.1`
ASN.1-Notation:	`{ iso(1) identified-organization(3) dod(6) internet(1) private(4) enterprise(1) tsingyao(59719) pki-certificate-system(5) cert-policy(1) policy-auto-issue(1) }`
OID-IRI-Notation:	`/ISO/Identified-Organization/6/1/4/1/TsingYao/PKICertificateSystem/CertPolicy/PolicyAutoIssue`
WEID-Notation:	`weid:P-1A2V-5-1-1-5`
DER-Kodierung:	`06:0B:2B:06:01:04:01:83:D2:47:05:01:01`

Beschreibung

English:
Automatic certificate issuance policy. Defines the conditions, validation requirements and applicable scope under which the Certification Authority (CA) may issue certificates automatically without manual review, and specifies the audit and revocation requirements for automatically issued certificates.
Status: registered but unused. No certificate has been issued under this policy; when activated, limit the policy to low-risk subjects and require at least domain control validation. The unused state shall be re-verified at each revision of this file.
Recommendation: automatic issuance shall always be paired with rate limiting, issuance logging and a fast revocation path, because a validation flaw produces misissued certificates at machine speed.
See also: 1.3.6.1.4.1.59719.5.1.1.1, 1.3.6.1.4.1.59719.5.5, 1.3.6.1.4.1.59719.6.3.
Verification: 2026-10-22 — this arc and all its sub-ordinates are confirmed unused; re-verify the unused state at each revision of this file.

中文:
证书自动签发策略。定义证书颁发机构（Certification Authority，CA）无需人工审核即可自动签发证书的条件、核验要求与适用范围，并规定自动签发证书的审计与吊销要求。
状态：已注册但未使用。尚未按本策略签发任何证书；启用时应将适用范围限制在低风险主体，并至少要求域名控制权校验。本文件每次修订时须重新核验该未使用状态。
建议：自动签发必须配套速率限制、签发日志与快速吊销通道，因为一旦核验存在缺陷，错误签发会以机器速度发生。
关联节点：1.3.6.1.4.1.59719.5.1.1.1、1.3.6.1.4.1.59719.5.5、1.3.6.1.4.1.59719.6.3。
核验：2026-10-22 —— 本弧及其全部下级标识均确认未使用，本文件每次修订时须重新核验该未使用状态。

Registrierungsstelle

tsingyao
E-Mail: op@tsingyao.net
JunQing Gu
TsingYao Technology Limited

Die Registrierungsstelle möchte ihre persönlichen Informationen nicht veröffentlichen.

Untergeordnete Objekte

ID	Base36	ASN.1 IDs (kommagetrennt)	IRI IDs (Kommagetrennt)	RA	Kommentar	Erstellt	Geändert
1	1	policy-auto-issue-v1	PolicyAutoIssueV1	tsingyao

Alternative Bezeichner

Bezeichner	Beschreibung
aid:D276000186B200054278A5EC287FB16F (Keine PIX erlaubt)	OIDplus Information Object Anwendungsbezeichner (ISO/IEC 7816)
guid:4278a5ec-0000-8000-a6d3-a9a1c2995967	OIDplus Information Object Custom UUID (RFC 9562)
guid:217338a7-29e3-362d-876a-8582e8f2fff4	Namensbasierte Version 3 / MD5 UUID mit Namensraum UUID_NAMEBASED_NS_OID
guid:bbb737d5-2b36-5016-80fc-d8657ccee0e0	Namensbasierte Version 5 / SHA1 UUID mit Namensraum UUID_NAMEBASED_NS_OID
mac:42-40-A8-7F-B1-6F	OIDplus Information Objekt Unicast MAC-Adresse (AAI)
mac:43-40-A8-7F-B1-6F	OIDplus Information Objekt Multicast MAC-Adresse (AAI)
weid:P-1A2V-5-1-1-5	WEID-Notation
x500dn:/dc=com/dc=example/cn=oidplus/1.3.6.1.4.1.37476.2.5.2.9.4.1=1115203052/1.3.6.1.4.1.37476.2.5.2.9.4.2=679457135	OIDplus Information Object X.500 DN