Policy EV SSL - 扩展验证（EV）SSL 证书策略 —— 最严格审核机制，核验域名、组织合法状态与授权资质

Zurückkehren Übergeordnet: Cert Policy - 证书策略（CP）子树 —— 规定所签发证书的适用范围、安全要求与签发/续期/吊销/审计约束 (1.3.6.1.4.1.59719.5.1)

Technische Informationen

Punkt-Notation:	`1.3.6.1.4.1.59719.5.1.120`
ASN.1-Notation:	`{ iso(1) identified-organization(3) dod(6) internet(1) private(4) enterprise(1) tsingyao(59719) pki-certificate-system(5) cert-policy(1) policy-ev-ssl(120) }`
OID-IRI-Notation:	`/ISO/Identified-Organization/6/1/4/1/TsingYao/PKICertificateSystem/CertPolicy/PolicyEvSsl`
WEID-Notation:	`weid:P-1A2V-5-1-3C-6`
DER-Kodierung:	`06:0B:2B:06:01:04:01:83:D2:47:05:01:78`

Beschreibung

English:
Extended Validation (EV) Secure Sockets Layer (SSL) certificate policy. This policy defines the configuration rules for EV SSL certificates and adopts the strictest review mechanism, verifying domain ownership as well as the legal status, physical existence and authorization qualification of the organization; it applies to issuing and managing EV SSL certificates for high-trust website encrypted communication.
Recommended handling: complete the rigorous organizational review procedures, retain supporting documents, and monitor the certificate validity period.
Status: registered but unused. No certificate has been issued under this policy; when activated, keep the full validation evidence package and revalidate whenever the organization information changes. The unused state shall be re-verified at each revision of this file.
Recommendation: EV issuance shall follow the CA/Browser Forum EV Guidelines; any deviation shall be documented in the CPS, otherwise the certificates may lose their intended public trust treatment.
See also: 1.3.6.1.4.1.59719.5.1.120.1, 1.3.6.1.4.1.59719.5.120, 1.3.6.1.4.1.59719.5.1.2.
Verification: 2026-10-22 — this arc and all its sub-ordinates are confirmed unused; re-verify the unused state at each revision of this file.

中文:
扩展验证（Extended Validation，EV）安全套接层（Secure Sockets Layer，SSL）证书策略。本策略定义 EV SSL 证书的配置规则，采用最严格的审核机制，核验域名所有权以及组织合法状态、实体存续性与授权资质，用于签发和管理高可信网站加密通信所用的 EV SSL 证书。
处理建议：完成严格的组织审核流程，留存佐证材料，监控证书有效期。
状态：已注册但未使用。尚未按本策略签发任何证书；启用时应完整留存验证佐证包，并在组织信息变更时重新核验。本文件每次修订时须重新核验该未使用状态。
建议：EV 签发应遵循 CA/Browser Forum EV 规范；任何偏离均应在 CPS 中记载，否则证书可能无法获得预期的公共信任待遇。
关联节点：1.3.6.1.4.1.59719.5.1.120.1、1.3.6.1.4.1.59719.5.120、1.3.6.1.4.1.59719.5.1.2。
核验：2026-10-22 —— 本弧及其全部下级标识均确认未使用，本文件每次修订时须重新核验该未使用状态。

Registrierungsstelle

tsingyao
E-Mail: op@tsingyao.net
JunQing Gu
TsingYao Technology Limited

Die Registrierungsstelle möchte ihre persönlichen Informationen nicht veröffentlichen.

Untergeordnete Objekte

ID	Base36	ASN.1 IDs (kommagetrennt)	IRI IDs (Kommagetrennt)	RA	Kommentar	Erstellt	Geändert
1	1	policy-ev-ssl-v1	PolicyEvSslV1	tsingyao

Alternative Bezeichner

Bezeichner	Beschreibung
aid:D276000186B200054278A5EC3DD9D93B (Keine PIX erlaubt)	OIDplus Information Object Anwendungsbezeichner (ISO/IEC 7816)
guid:4278a5ec-0000-8000-a6d3-1d041218eb37	OIDplus Information Object Custom UUID (RFC 9562)
guid:6e53d73c-6c4a-31cf-8f68-1ec6cb9bbc7b	Namensbasierte Version 3 / MD5 UUID mit Namensraum UUID_NAMEBASED_NS_OID
guid:e2452c4f-19c6-5c21-a7ae-b0444e8be251	Namensbasierte Version 5 / SHA1 UUID mit Namensraum UUID_NAMEBASED_NS_OID
mac:82-86-BD-D9-D9-3B	OIDplus Information Objekt Unicast MAC-Adresse (AAI)
mac:83-86-BD-D9-D9-3B	OIDplus Information Objekt Multicast MAC-Adresse (AAI)
weid:P-1A2V-5-1-3C-6	WEID-Notation
x500dn:/dc=com/dc=example/cn=oidplus/1.3.6.1.4.1.37476.2.5.2.9.4.1=1115203052/1.3.6.1.4.1.37476.2.5.2.9.4.2=1037687099	OIDplus Information Object X.500 DN