Trust Point Table - 信任点表 —— 已配置信任锚与信任点，含 CA 名称、可信根、证书链、吊销检查策略与信任状态

Zurückkehren Übergeordnet: PKI - PKI 与证书运行态监控子树 —— 通过标量与表对象暴露证书、信任点、CRL、OCSP、密钥与 CA 连接状态 (1.3.6.1.4.1.59719.6.1)

Technische Informationen

Punkt-Notation:	`1.3.6.1.4.1.59719.6.1.4`
ASN.1-Notation:	`{ iso(1) identified-organization(3) dod(6) internet(1) private(4) enterprise(1) tsingyao(59719) security(6) pki(1) trust-point-table(4) }`
OID-IRI-Notation:	`/ISO/Identified-Organization/6/1/4/1/TsingYao/Security/Pki/TrustPointTable`
WEID-Notation:	`weid:P-1A2V-6-1-4-7`
DER-Kodierung:	`06:0B:2B:06:01:04:01:83:D2:47:06:01:04`

Beschreibung

English:
Trust point table. Lists the configured trust anchors and trust points, including the Certification Authority (CA) name, trusted root certificate, certificate chain, revocation check policy and trust state, used for trust chain construction and validation policy management.
Status: registered but unused. No trust point table has been implemented; when implementing, record the revocation checking policy (CRL, OCSP or both) and the degradation behaviour per trust point. The unused state shall be re-verified at each revision of this file.
Recommendation: expose the trust state and the certificate chain completeness for each trust point, because most chain validation failures are caused by incomplete chains rather than by untrusted roots.
See also: 1.3.6.1.4.1.59719.0.3.90, 1.3.6.1.4.1.59719.6.1.5, 1.3.6.1.4.1.59719.6.1.6.
Verification: 2026-10-22 — this arc and all its sub-ordinates are confirmed unused; re-verify the unused state at each revision of this file.

中文:
信任点表。列举已配置的信任锚与信任点，包含证书颁发机构（Certification Authority，CA）名称、可信根证书、证书链、吊销检查策略与信任状态，用于信任链构建与校验策略管理。
状态：已注册但未使用。尚无信任点表被实现；实现时应逐点记录吊销校验策略（CRL、OCSP 或两者）与降级行为。本文件每次修订时须重新核验该未使用状态。
建议：应暴露每个信任点的信任状态与证书链完整性，因为多数链校验失败源于链不完整而非根不受信。
关联节点：1.3.6.1.4.1.59719.0.3.90、1.3.6.1.4.1.59719.6.1.5、1.3.6.1.4.1.59719.6.1.6。
核验：2026-10-22 —— 本弧及其全部下级标识均确认未使用，本文件每次修订时须重新核验该未使用状态。

Registrierungsstelle

tsingyao
E-Mail: op@tsingyao.net
JunQing Gu
TsingYao Technology Limited

Die Registrierungsstelle möchte ihre persönlichen Informationen nicht veröffentlichen.

Untergeordnete Objekte

ID	Base36	ASN.1 IDs (kommagetrennt)	IRI IDs (Kommagetrennt)	RA	Kommentar	Erstellt	Geändert
Keine Einträge vorhanden

Alternative Bezeichner

Bezeichner	Beschreibung
aid:D276000186B200054278A5EC457ECDE9 (Keine PIX erlaubt)	OIDplus Information Object Anwendungsbezeichner (ISO/IEC 7816)
guid:4278a5ec-0000-8000-a6d3-5569d5b69026	OIDplus Information Object Custom UUID (RFC 9562)
guid:d608a5cf-b583-3e4d-88a1-b5eb4710cd87	Namensbasierte Version 3 / MD5 UUID mit Namensraum UUID_NAMEBASED_NS_OID
guid:d0aa64de-dda5-5cbe-be3b-62073fc901bf	Namensbasierte Version 5 / SHA1 UUID mit Namensraum UUID_NAMEBASED_NS_OID
mac:62-DF-C5-7E-CD-E9	OIDplus Information Objekt Unicast MAC-Adresse (AAI)
mac:63-DF-C5-7E-CD-E9	OIDplus Information Objekt Multicast MAC-Adresse (AAI)
weid:P-1A2V-6-1-4-7	WEID-Notation
x500dn:/dc=com/dc=example/cn=oidplus/1.3.6.1.4.1.37476.2.5.2.9.4.1=1115203052/1.3.6.1.4.1.37476.2.5.2.9.4.2=1165938153	OIDplus Information Object X.500 DN