PKI - PKI 与证书运行态监控子树 —— 通过标量与表对象暴露证书、信任点、CRL、OCSP、密钥与 CA 连接状态

Go back Parent node: Security Domain - 安全域 —— 部署运行状态类的安全对象（PKI 监控、认证、审计、合规、威胁），区别于安全产品线 1.3.6.1.4.1.59719.2.900 (1.3.6.1.4.1.59719.6)

Technical information

Dot notation:	`1.3.6.1.4.1.59719.6.1`
ASN.1 notation:	`{ iso(1) identified-organization(3) dod(6) internet(1) private(4) enterprise(1) tsingyao(59719) security(6) pki(1) }`
OID-IRI notation:	`/ISO/Identified-Organization/6/1/4/1/TsingYao/Security/Pki`
WEID notation:	`weid:P-1A2V-6-1-1`
DER encoding:	`06:0A:2B:06:01:04:01:83:D2:47:06:01`

Description

English:
Public Key Infrastructure (PKI) and certificate runtime monitoring subtree. Exposes the running state of certificates, trust points, Certificate Revocation Lists (CRL), Online Certificate Status Protocol (OCSP), keys and Certification Authority (CA) connections through scalars and tables for continuous monitoring and alarm triggering.
Design rule: scalars (6.1.1) carry the global summary for fast polling, while tables (6.1.2 to 6.1.7) carry per-instance state; every alarm defined under 1.3.6.1.4.1.59719.0.3 shall be traceable to a scalar or table object here.
Status: registered but unused. No monitoring object has been implemented; when implementing, define the table indexes and the relationship between tables before allocating sub-identifiers. The unused state shall be re-verified at each revision of this file.
Recommendation: define the units and the update interval for each object, and ensure that table rows are identifiable by a stable key so that historical data can be correlated.
See also: 1.3.6.1.4.1.59719.6.1.1 to 1.3.6.1.4.1.59719.6.1.7, 1.3.6.1.4.1.59719.0.3.
Verification: 2026-10-22 — this arc and all its sub-ordinates are confirmed unused; re-verify the unused state at each revision of this file.

中文:
公钥基础设施（Public Key Infrastructure，PKI）与证书运行态监控子树。通过标量与表对象对外暴露证书、信任点、证书吊销列表（Certificate Revocation List，CRL）、在线证书状态协议（OCSP）、密钥与证书颁发机构（Certification Authority，CA）连接的运行状态，用于持续监控与告警触发。
设计规则：标量（6.1.1）承载全局汇总以便快速轮询，表对象（6.1.2 至 6.1.7）承载实例级状态；1.3.6.1.4.1.59719.0.3 下每条告警都应可追溯到本子树的某个标量或表对象。
状态：已注册但未使用。尚无监控对象被实现；实现时应先定义各表索引与表间关系，再分配子标识。本文件每次修订时须重新核验该未使用状态。
建议：为每个对象定义单位与更新周期，并确保表行可用稳定主键标识，以便历史数据关联。
关联节点：1.3.6.1.4.1.59719.6.1.1 至 1.3.6.1.4.1.59719.6.1.7、1.3.6.1.4.1.59719.0.3。
核验：2026-10-22 —— 本弧及其全部下级标识均确认未使用，本文件每次修订时须重新核验该未使用状态。

Registration Authority

tsingyao
E-Mail: op@tsingyao.net
JunQing Gu
TsingYao Technology Limited

The RA does not want to publish their personal information.

Subordinate objects

ID	Base36	ASN.1 IDs (comma sep.)	IRI IDs (comma sep.)	RA
1	1	pki-scalar	PkiScalar	tsingyao
2	2	cert-table	CertTable	tsingyao
3	3	cert-entry	CertEntry	tsingyao
4	4	trust-point-table	TrustPointTable	tsingyao
5	5	crl-table	CrlTable	tsingyao
6	6	ocsp-table	OcspTable	tsingyao
7	7	key-table	KeyTable	tsingyao

Alternative Identifiers

Identifier	Description
aid:D276000186B200054278A5EC484C8092 (No PIX allowed)	OIDplus Information Object Application Identifier (ISO/IEC 7816)
aid:D276000186F62B0601040183D2470601 (No PIX allowed)	Application Identifier (ISO/IEC 7816)
guid:4278a5ec-0000-8000-a6d3-0acbd35cb72d	OIDplus Information Object Custom UUID (RFC 9562)
guid:e914a21a-f560-3116-9697-18b91aabebe1	Name based version 3 / MD5 UUID with namespace UUID_NAMEBASED_NS_OID
guid:9517aa1f-3a34-5dee-9365-e9b2db181fca	Name based version 5 / SHA1 UUID with namespace UUID_NAMEBASED_NS_OID
mac:02-15-C8-4C-80-92	OIDplus Information Object MAC address, Unicast (AAI)
mac:03-15-C8-4C-80-92	OIDplus Information Object MAC address, Multicast (AAI)
weid:P-1A2V-6-1-1	WEID notation
x500dn:/dc=com/dc=example/cn=oidplus/1.3.6.1.4.1.37476.2.5.2.9.4.1=1115203052/1.3.6.1.4.1.37476.2.5.2.9.4.2=1212973202	OIDplus Information Object X.500 DN