Cert Ext - 私有 X.509 证书扩展弧 —— 承载设备属性、能力标签、租户标识与授权信息的私有扩展

Go back Parent node: PKI Certificate System - 公钥基础设施（PKI）证书系统子树 —— 证书策略、类型标识、私有扩展、EKU、属性与协议 (1.3.6.1.4.1.59719.5)

Technical information

Dot notation:	`1.3.6.1.4.1.59719.5.2`
ASN.1 notation:	`{ iso(1) identified-organization(3) dod(6) internet(1) private(4) enterprise(1) tsingyao(59719) pki-certificate-system(5) cert-ext(2) }`
OID-IRI notation:	`/ISO/Identified-Organization/6/1/4/1/TsingYao/PKICertificateSystem/CertExt`
WEID notation:	`weid:P-1A2V-5-2-0`
DER encoding:	`06:0A:2B:06:01:04:01:83:D2:47:05:02`

Description

English:
Private X.509 certificate extension arc. Defines TsingYao private extensions carried in X.509 certificates, used to carry device attributes, capability tags, tenant identifiers and authorization information.
Registration rule: when defining an extension, register its Object Identifier (OID), value syntax, encoding rules and criticality at the same time, and mark it critical only when the relying party must be able to parse it; a critical private extension that a public relying party cannot parse will cause validation failure.
Status: registered but unused. No private extension has been defined or issued in a certificate; allocate extension numbers in ascending order and record the value syntax for each one. The unused state shall be re-verified at each revision of this file.
Recommendation: prefer non-critical private extensions for informational attributes, and keep the semantics of a published extension immutable; a semantic change requires a new extension identifier.
See also: 1.3.6.1.4.1.59719.5.3, 1.3.6.1.4.1.59719.5.4, 1.3.6.1.4.1.59719.5.
Verification: 2026-10-22 — this arc and all its sub-ordinates are confirmed unused; re-verify the unused state at each revision of this file.

中文:
私有 X.509 证书扩展弧。定义在 X.509 证书中承载的清曜私有扩展，用于携带设备属性、能力标签、租户标识与授权信息。
登记要求：定义扩展时应同步登记其对象标识符（OID）、值语法、编码规则与关键性；仅在依赖方必须能够解析该扩展时才将其标记为关键（critical）——公共依赖方无法解析的关键私有扩展会导致校验失败。
状态：已注册但未使用。尚未定义任何私有扩展，也没有证书携带本弧扩展；分配扩展号应按升序进行并逐项记录值语法。本文件每次修订时须重新核验该未使用状态。
建议：信息类属性优先使用非关键私有扩展；已发布扩展的语义不得变更，语义变化需启用新的扩展标识。
关联节点：1.3.6.1.4.1.59719.5.3、1.3.6.1.4.1.59719.5.4、1.3.6.1.4.1.59719.5。
核验：2026-10-22 —— 本弧及其全部下级标识均确认未使用，本文件每次修订时须重新核验该未使用状态。

Registration Authority

tsingyao
E-Mail: op@tsingyao.net
JunQing Gu
TsingYao Technology Limited

The RA does not want to publish their personal information.

Subordinate objects

ID	Base36	ASN.1 IDs (comma sep.)	IRI IDs (comma sep.)	RA	Comment	Created	Updated
No items available

Alternative Identifiers

Identifier	Description
aid:D276000186B200054278A5EC228E68D0 (No PIX allowed)	OIDplus Information Object Application Identifier (ISO/IEC 7816)
aid:D276000186F62B0601040183D2470502 (No PIX allowed)	Application Identifier (ISO/IEC 7816)
guid:4278a5ec-0000-8000-a6d3-926c893fa13c	OIDplus Information Object Custom UUID (RFC 9562)
guid:937970c0-cb4b-3516-9152-4a318e637a25	Name based version 3 / MD5 UUID with namespace UUID_NAMEBASED_NS_OID
guid:146bdf12-990a-5cfa-9a16-ec55174d8a2b	Name based version 5 / SHA1 UUID with namespace UUID_NAMEBASED_NS_OID
mac:12-46-A2-8E-68-D0	OIDplus Information Object MAC address, Unicast (AAI)
mac:13-46-A2-8E-68-D0	OIDplus Information Object MAC address, Multicast (AAI)
weid:P-1A2V-5-2-0	WEID notation
x500dn:/dc=com/dc=example/cn=oidplus/1.3.6.1.4.1.37476.2.5.2.9.4.1=1115203052/1.3.6.1.4.1.37476.2.5.2.9.4.2=579758288	OIDplus Information Object X.500 DN