Certificate Alarm - 证书告警子树 —— 到期预警 10-19、已过期 20-29、吊销校验异常 30-59、CA 与信任链异常 60-99

Go back Parent node: Notifications - 通知与告警标识弧 —— 承载于 SNMP Trap/Inform、syslog 与内部事件消息的清曜私有事件类型标识 (1.3.6.1.4.1.59719.0)

Technical information

Dot notation:	`1.3.6.1.4.1.59719.0.3`
ASN.1 notation:	`{ iso(1) identified-organization(3) dod(6) internet(1) private(4) enterprise(1) tsingyao(59719) notifications(0) certificate-alarm(3) }`
OID-IRI notation:	`/ISO/Identified-Organization/6/1/4/1/TsingYao/Notifications/CertificateAlarm`
WEID notation:	`weid:P-1A2V-0-3-3`
DER encoding:	`06:0A:2B:06:01:04:01:83:D2:47:00:03`

Description

English:
Certificate alarm subtree. Covers certificate lifecycle and revocation status alarms: expiry warning (10 to 19), expired (20 to 29), revocation status verification failure (30 to 59), Certification Authority (CA) and trust chain abnormality (60 to 99).
Payload requirement: the certificate identifier, subject, issuer, remaining validity and recommended handling action. Escalation rule: 30-day warning, 7-day warning and 1-day warning are progressive escalations of the same lifecycle event and shall be de-duplicated by certificate identifier.
Status: registered but unused. No certificate alarm has been emitted; before activation, define the monitoring scan interval, the alarm de-duplication window and the recovery (clear) condition. The unused state shall be re-verified at each revision of this file.
Recommendation: keep the alarm identifiers stable and independent from the certificate policy (1.3.6.1.4.1.59719.5.1) and certificate type (1.3.6.1.4.1.59719.5.100 to 5.800) identifiers, since an alarm describes runtime state while a policy describes issuance semantics.
See also: 1.3.6.1.4.1.59719.0.3.10 to 1.3.6.1.4.1.59719.0.3.90, 1.3.6.1.4.1.59719.6.1.2 (certificate table).
Verification: 2026-10-22 — this arc and all its sub-ordinates are confirmed unused; re-verify the unused state at each revision of this file.

中文:
证书告警子树。覆盖证书生命周期与吊销状态类告警：到期预警（10-19）、已过期（20-29）、吊销状态校验异常（30-59）、证书颁发机构（Certification Authority，CA）与信任链异常（60-99）。
每条告警携带证书标识、主体、颁发者、剩余有效期与建议处理动作。升级规则：30 天、7 天、1 天预警是同一生命周期事件的递进升级，应按证书标识去重。
状态：已注册但未使用。尚未发出任何证书告警；启用前应定义监控扫描周期、告警去重窗口与恢复（清除）条件。本文件每次修订时须重新核验该未使用状态。
建议：保持告警标识与证书策略（1.3.6.1.4.1.59719.5.1）、证书类型（1.3.6.1.4.1.59719.5.100 至 5.800）标识相互独立——告警描述运行态，策略描述签发语义。
关联节点：1.3.6.1.4.1.59719.0.3.10 至 1.3.6.1.4.1.59719.0.3.90、1.3.6.1.4.1.59719.6.1.2（证书表）。
核验：2026-10-22 —— 本弧及其全部下级标识均确认未使用，本文件每次修订时须重新核验该未使用状态。

Registration Authority

tsingyao
E-Mail: op@tsingyao.net
JunQing Gu
TsingYao Technology Limited

The RA does not want to publish their personal information.

Subordinate objects

ID	Base36	ASN.1 IDs (comma sep.)	IRI IDs (comma sep.)	RA
10	A	cert-expiry-30d	CertExpiry30d	tsingyao
11	B	cert-near-expiry-7d	CertNearExpiry7d	tsingyao
12	C	cert-expiry-1d	CertExpiry1d	tsingyao
20	K	cert-expired	CertExpired	tsingyao
30	U	crl-update-failed	CrlUpdateFailed	tsingyao
40	14	ocsp-unreachable	OcspUnreachable	tsingyao
50	1E	cert-revoked	CertRevoked	tsingyao
60	1O	ca-unreachable	CaUnreachable	tsingyao
90	2I	cert-chain-invalid	CertChainInvalid	tsingyao

Alternative Identifiers

Identifier	Description
aid:D276000186B200054278A5EC131CA0E2 (No PIX allowed)	OIDplus Information Object Application Identifier (ISO/IEC 7816)
aid:D276000186F62B0601040183D2470003 (No PIX allowed)	Application Identifier (ISO/IEC 7816)
guid:4278a5ec-0000-8000-a6d3-09b956f29b35	OIDplus Information Object Custom UUID (RFC 9562)
guid:6af72807-6de1-30d3-b491-5bea1177d14b	Name based version 3 / MD5 UUID with namespace UUID_NAMEBASED_NS_OID
guid:4a360c50-8493-51ec-8604-df39305fc13b	Name based version 5 / SHA1 UUID with namespace UUID_NAMEBASED_NS_OID
mac:C2-D8-93-1C-A0-E2	OIDplus Information Object MAC address, Unicast (AAI)
mac:C3-D8-93-1C-A0-E2	OIDplus Information Object MAC address, Multicast (AAI)
weid:P-1A2V-0-3-3	WEID notation
x500dn:/dc=com/dc=example/cn=oidplus/1.3.6.1.4.1.37476.2.5.2.9.4.1=1115203052/1.3.6.1.4.1.37476.2.5.2.9.4.2=320643298	OIDplus Information Object X.500 DN