Cert Mail - 证书类型标识：S/MIME 邮件证书 —— 用于邮件数字签名与加密，不得用于服务器认证或代码签名

Go back Parent node: PKI Certificate System - 公钥基础设施（PKI）证书系统子树 —— 证书策略、类型标识、私有扩展、EKU、属性与协议 (1.3.6.1.4.1.59719.5)

Technical information

Dot notation:	`1.3.6.1.4.1.59719.5.220`
ASN.1 notation:	`{ iso(1) identified-organization(3) dod(6) internet(1) private(4) enterprise(1) tsingyao(59719) pki-certificate-system(5) cert-mail(220) }`
OID-IRI notation:	`/ISO/Identified-Organization/6/1/4/1/TsingYao/PKICertificateSystem/CertMail`
WEID notation:	`weid:P-1A2V-5-64-4`
DER encoding:	`06:0B:2B:06:01:04:01:83:D2:47:05:81:5C`

Description

English:
Certificate type identifier for Secure/Multipurpose Internet Mail Extensions (S/MIME) mail certificates, used for email digital signature and email encryption; it shall not be used for server authentication or code signing.
Status: registered but unused. No S/MIME certificate has been issued with this type identifier; when used, map it to the mail policy (1.3.6.1.4.1.59719.5.1.220) and bind the certificate to a verified mailbox address. The unused state shall be re-verified at each revision of this file.
Recommendation: enforce the usage restriction with the extended key usage extension, and define the key escrow or recovery policy for encrypted mail before deployment, because lost keys make encrypted mail unreadable.
See also: 1.3.6.1.4.1.59719.5.1.220, 1.3.6.1.4.1.59719.5.800, 1.3.6.1.4.1.59719.6.1.7.
Verification: 2026-10-22 — this arc and all its sub-ordinates are confirmed unused; re-verify the unused state at each revision of this file.

中文:
安全多用途互联网邮件扩展（Secure/Multipurpose Internet Mail Extensions，S/MIME）邮件证书的证书类型标识，用于邮件数字签名与邮件加密，不得用于服务器认证或代码签名。
状态：已注册但未使用。尚未以本类型标识签发任何邮件证书；使用时应映射到邮件策略（1.3.6.1.4.1.59719.5.1.220），并将证书与已验证邮箱地址绑定。本文件每次修订时须重新核验该未使用状态。
建议：通过扩展密钥用法扩展强制执行使用限制，并在部署前定义加密邮件的密钥托管或恢复策略，因为密钥丢失将导致加密邮件不可读。
关联节点：1.3.6.1.4.1.59719.5.1.220、1.3.6.1.4.1.59719.5.800、1.3.6.1.4.1.59719.6.1.7。
核验：2026-10-22 —— 本弧及其全部下级标识均确认未使用，本文件每次修订时须重新核验该未使用状态。

Registration Authority

tsingyao
E-Mail: op@tsingyao.net
JunQing Gu
TsingYao Technology Limited

The RA does not want to publish their personal information.

Subordinate objects

ID	Base36	ASN.1 IDs (comma sep.)	IRI IDs (comma sep.)	RA	Comment	Created	Updated
No items available

Alternative Identifiers

Identifier	Description
aid:D276000186B200054278A5EC399CC33B (No PIX allowed)	OIDplus Information Object Application Identifier (ISO/IEC 7816)
guid:4278a5ec-0000-8000-a6d3-f0847beb6e06	OIDplus Information Object Custom UUID (RFC 9562)
guid:9f318109-9576-3e7f-8f65-9d667ce6b259	Name based version 3 / MD5 UUID with namespace UUID_NAMEBASED_NS_OID
guid:290d7b7e-2f80-5590-94fb-45972a75a24e	Name based version 5 / SHA1 UUID with namespace UUID_NAMEBASED_NS_OID
mac:E2-8C-B9-9C-C3-3B	OIDplus Information Object MAC address, Unicast (AAI)
mac:E3-8C-B9-9C-C3-3B	OIDplus Information Object MAC address, Multicast (AAI)
weid:P-1A2V-5-64-4	WEID notation
x500dn:/dc=com/dc=example/cn=oidplus/1.3.6.1.4.1.37476.2.5.2.9.4.1=1115203052/1.3.6.1.4.1.37476.2.5.2.9.4.2=966574907	OIDplus Information Object X.500 DN