Übergeordnet: Policy IV SSL - 个人验证(IV)SSL 证书策略 —— 清曜自定义验证等级,在域名控制之外核验订户个人真实身份 (1.3.6.1.4.1.59719.5.1.105)
Technische Informationen
| Punkt-Notation: | 1.3.6.1.4.1.59719.5.1.105.1 |
| ASN.1-Notation: | { iso(1) identified-organization(3) dod(6) internet(1) private(4) enterprise(1) tsingyao(59719) pki-certificate-system(5) cert-policy(1) policy-iv-ssl(105) policy-iv-ssl-v1(1) } |
| OID-IRI-Notation: | /ISO/Identified-Organization/6/1/4/1/TsingYao/PKICertificateSystem/CertPolicy/PolicyIvSsl/PolicyIvSslV1 |
| WEID-Notation: | weid:P-1A2V-5-1-2X-1-9 |
| DER-Kodierung: | 06:0C:2B:06:01:04:01:83:D2:47:05:01:69:01 |
Beschreibung
English:
Version 1 of the Individual Validation (IV) Secure Sockets Layer (SSL) certificate policy. Defines the baseline issuance rules for IV certificates, requiring validation of both the domain control of the Fully Qualified Domain Name (FQDN) and the real identity of the individual subscriber through government-issued identity documents.
Note: Individual Validation (IV) is a TsingYao proprietary validation level that is not defined by the CA/Browser Forum Baseline Requirements; the reliance restrictions and the accepted identity document types shall be stated in the Certification Practice Statement (CPS) before this version is activated.
Status: registered but unused. No certificate has been issued under this policy version; before first issuance, publish the CPS section describing the IV validation procedure and confirm the retention rules for identity evidence. The unused state shall be re-verified at each revision of this file.
Recommendation: Allocate a new version node when the accepted document types or the validation depth change, so that an issued certificate always remains describable by the version in force at issuance time.
See also: 1.3.6.1.4.1.59719.5.1.105, 1.3.6.1.4.1.59719.5.1.2.1, 1.3.6.1.4.1.59719.5.105.
Verification: 2026-10-22 — this arc and all its sub-ordinates are confirmed unused; re-verify the unused state at each revision of this file.
中文:
个人验证(Individual Validation,IV)安全套接层(Secure Sockets Layer,SSL)证书策略第 1 版。定义 IV 证书的基线签发规则,要求同时核验完全限定域名(Fully Qualified Domain Name,FQDN)的域名控制权与订户个人通过政府签发身份证件体现的真实身份。
说明:个人验证(Individual Validation,IV)是清曜自定义的验证等级,CA/Browser Forum 基线要求中并无此定义;本版本启用前应在认证业务规则声明(Certification Practice Statement,CPS)中载明依赖限制与可接受的身份证件类型。
状态:已注册但未使用。尚未按本策略版本签发任何证书;首次签发前应发布描述 IV 验证流程的 CPS 章节,并确认身份证据的留存规则。本文件每次修订时须重新核验该未使用状态。
建议:当可接受的证件类型或验证深度发生变化时应新增版本节点,使已签发证书始终可用签发时有效的版本描述。
关联节点:1.3.6.1.4.1.59719.5.1.105、1.3.6.1.4.1.59719.5.1.2.1、1.3.6.1.4.1.59719.5.105。
核验:2026-10-22 —— 本弧及其全部下级标识均确认未使用,本文件每次修订时须重新核验该未使用状态。
Registrierungsstelle
tsingyaoE-Mail:
op@tsingyao.netJunQing Gu
TsingYao Technology Limited
Die Registrierungsstelle möchte ihre persönlichen Informationen nicht veröffentlichen.
Untergeordnete Objekte
| ID | Base36 | ASN.1 IDs (kommagetrennt) | IRI IDs (Kommagetrennt) | RA | Kommentar | Erstellt | Geändert |
| Keine Einträge vorhanden |
Alternative Bezeichner
| Bezeichner | Beschreibung |
|---|
aid:D276000186B200054278A5EC243D2AFE (Keine PIX erlaubt) | OIDplus Information Object Anwendungsbezeichner (ISO/IEC 7816)  |
| guid:4278a5ec-0000-8000-a6d3-300c0dd0ca7f | OIDplus Information Object Custom UUID (RFC 9562)  |
| guid:06f9d310-9dee-3433-a4fd-c4a13d1ec290 | Namensbasierte Version 3 / MD5 UUID mit Namensraum UUID_NAMEBASED_NS_OID |
| guid:512d11c2-a026-5ee2-9090-f6eb9299ab0c | Namensbasierte Version 5 / SHA1 UUID mit Namensraum UUID_NAMEBASED_NS_OID |
| mac:62-70-24-3D-2A-FE | OIDplus Information Objekt Unicast MAC-Adresse (AAI) |
| mac:63-70-24-3D-2A-FE | OIDplus Information Objekt Multicast MAC-Adresse (AAI) |
| weid:P-1A2V-5-1-2X-1-9 | WEID-Notation  |
| x500dn:/dc=com/dc=example/cn=oidplus/1.3.6.1.4.1.37476.2.5.2.9.4.1=1115203052/1.3.6.1.4.1.37476.2.5.2.9.4.2=607988478 | OIDplus Information Object X.500 DN |

OID-IP: , , ()
()