Übergeordnet: Policy OV SSL - 组织验证(OV)SSL 证书策略 —— 在域名所有权之外核验申请组织的合法存续与身份信息 (1.3.6.1.4.1.59719.5.1.110)
Technische Informationen
| Punkt-Notation: | 1.3.6.1.4.1.59719.5.1.110.1 |
| ASN.1-Notation: | { iso(1) identified-organization(3) dod(6) internet(1) private(4) enterprise(1) tsingyao(59719) pki-certificate-system(5) cert-policy(1) policy-ov-ssl(110) policy-ov-ssl-v1(1) } |
| OID-IRI-Notation: | /ISO/Identified-Organization/6/1/4/1/TsingYao/PKICertificateSystem/CertPolicy/PolicyOvSsl/PolicyOvSslV1 |
| WEID-Notation: | weid:P-1A2V-5-1-32-1-7 |
| DER-Kodierung: | 06:0C:2B:06:01:04:01:83:D2:47:05:01:6E:01 |
Beschreibung
English:
Version 1 of the Organization Validated (OV) Secure Sockets Layer (SSL) certificate policy. Defines the baseline issuance rules for OV certificates: in addition to domain ownership verification, the legal existence and the identity information of the applicant organization are validated.
Status: registered but unused. No certificate has been issued under this policy version; when activated, define the accepted organization evidence sources and the revalidation period in the CPS. The unused state shall be re-verified at each revision of this file.
Recommendation: Make OV the recommended default for enterprise websites because it balances validation cost and identity assurance, and reserve Domain Validated (DV) certificates for internal or non-critical endpoints.
See also: 1.3.6.1.4.1.59719.5.1.110, 1.3.6.1.4.1.59719.5.1.100.1, 1.3.6.1.4.1.59719.5.110.
Verification: 2026-10-22 — this arc and all its sub-ordinates are confirmed unused; re-verify the unused state at each revision of this file.
中文:
组织验证(Organization Validated,OV)安全套接层(Secure Sockets Layer,SSL)证书策略第 1 版。定义 OV 证书的基线签发规则:在域名所有权核验之外,还须核验申请组织的合法存续与身份信息。
状态:已注册但未使用。尚未按本策略版本签发任何证书;启用时应在 CPS 中定义可接受的组织证据来源与重新核验周期。本文件每次修订时须重新核验该未使用状态。
建议:OV 应作为企业站点的推荐默认等级,因为其在验证成本与身份保证之间取得平衡;域名验证(Domain Validated,DV)证书应保留给内部或非关键端点。
关联节点:1.3.6.1.4.1.59719.5.1.110、1.3.6.1.4.1.59719.5.1.100.1、1.3.6.1.4.1.59719.5.110。
核验:2026-10-22 —— 本弧及其全部下级标识均确认未使用,本文件每次修订时须重新核验该未使用状态。
Registrierungsstelle
tsingyaoE-Mail:
op@tsingyao.netJunQing Gu
TsingYao Technology Limited
Die Registrierungsstelle möchte ihre persönlichen Informationen nicht veröffentlichen.
Untergeordnete Objekte
| ID | Base36 | ASN.1 IDs (kommagetrennt) | IRI IDs (Kommagetrennt) | RA | Kommentar | Erstellt | Geändert |
| Keine Einträge vorhanden |
Alternative Bezeichner
| Bezeichner | Beschreibung |
|---|
aid:D276000186B200054278A5EC33FA734B (Keine PIX erlaubt) | OIDplus Information Object Anwendungsbezeichner (ISO/IEC 7816)  |
| guid:4278a5ec-0000-8000-a6d3-1ed691c94c6d | OIDplus Information Object Custom UUID (RFC 9562)  |
| guid:0d531b05-1208-3020-8ee3-472705361b41 | Namensbasierte Version 3 / MD5 UUID mit Namensraum UUID_NAMEBASED_NS_OID |
| guid:bdb3deab-e92f-57db-8438-0e864d1fd1cf | Namensbasierte Version 5 / SHA1 UUID mit Namensraum UUID_NAMEBASED_NS_OID |
| mac:22-FA-33-FA-73-4B | OIDplus Information Objekt Unicast MAC-Adresse (AAI) |
| mac:23-FA-33-FA-73-4B | OIDplus Information Objekt Multicast MAC-Adresse (AAI) |
| weid:P-1A2V-5-1-32-1-7 | WEID-Notation  |
| x500dn:/dc=com/dc=example/cn=oidplus/1.3.6.1.4.1.37476.2.5.2.9.4.1=1115203052/1.3.6.1.4.1.37476.2.5.2.9.4.2=872051531 | OIDplus Information Object X.500 DN |

OID-IP: , , ()
()