Policy Auto Issue V1 - 证书自动签发策略第 1 版 —— 基线版本，仅通过域名控制权校验、不核验组织或个人身份

Go back Parent node: Policy Auto Issue - 证书自动签发策略 —— 定义 CA 免人工审核自动签发证书的条件、核验要求与审计要求 (1.3.6.1.4.1.59719.5.1.1)

Technical information

Dot notation:	`1.3.6.1.4.1.59719.5.1.1.1`
ASN.1 notation:	`{ iso(1) identified-organization(3) dod(6) internet(1) private(4) enterprise(1) tsingyao(59719) pki-certificate-system(5) cert-policy(1) policy-auto-issue(1) policy-auto-issue-v1(1) }`
OID-IRI notation:	`/ISO/Identified-Organization/6/1/4/1/TsingYao/PKICertificateSystem/CertPolicy/PolicyAutoIssue/PolicyAutoIssueV1`
WEID notation:	`weid:P-1A2V-5-1-1-1-9`
DER encoding:	`06:0C:2B:06:01:04:01:83:D2:47:05:01:01:01`

Description

English:
Version 1 of the automatic certificate issuance policy. Baseline version applicable to automatically issued certificates that pass domain control validation only, without organization or individual identity validation.
Recommended scope: internal and low-risk scenarios only; do not use for externally trusted services, financial transactions or code signing, because the subject identity is not verified.
Status: registered but unused. No certificate has been issued under this policy version; when activated, cap the validity period (for example 90 days or shorter) and require periodic revalidation. The unused state shall be re-verified at each revision of this file.
Recommendation: state the reliance limitation in the CPS and consider marking the issued certificates with a private extension (1.3.6.1.4.1.59719.5.2) so that relying parties can recognise the validation level.
See also: 1.3.6.1.4.1.59719.5.1.1, 1.3.6.1.4.1.59719.5.2, 1.3.6.1.4.1.59719.5.100.
Verification: 2026-10-22 — this arc and all its sub-ordinates are confirmed unused; re-verify the unused state at each revision of this file.

中文:
证书自动签发策略第 1 版。基线版本，适用于仅通过域名控制权校验、未核验组织或个人身份的自动签发证书。
建议适用范围：仅限内部与低风险场景；不得用于对外可信服务、金融交易或代码签名，因为主体身份未经验证。
状态：已注册但未使用。尚未按本策略版本签发任何证书；启用时应限制有效期上限（如 90 天或更短）并要求周期性重新核验。本文件每次修订时须重新核验该未使用状态。
建议：在 CPS 中载明信赖限制，并考虑用私有扩展（1.3.6.1.4.1.59719.5.2）标记所签发证书，使依赖方可识别验证等级。
关联节点：1.3.6.1.4.1.59719.5.1.1、1.3.6.1.4.1.59719.5.2、1.3.6.1.4.1.59719.5.100。
核验：2026-10-22 —— 本弧及其全部下级标识均确认未使用，本文件每次修订时须重新核验该未使用状态。

Registration Authority

tsingyao
E-Mail: op@tsingyao.net
JunQing Gu
TsingYao Technology Limited

The RA does not want to publish their personal information.

Subordinate objects

ID	Base36	ASN.1 IDs (comma sep.)	IRI IDs (comma sep.)	RA	Comment	Created	Updated
No items available

Alternative Identifiers

Identifier	Description
aid:D276000186B200054278A5EC2EECA1CE (No PIX allowed)	OIDplus Information Object Application Identifier (ISO/IEC 7816)
guid:4278a5ec-0000-8000-a6d3-bb04901fc5cb	OIDplus Information Object Custom UUID (RFC 9562)
guid:2e1856eb-ab82-340c-97ae-6d5dddf28810	Name based version 3 / MD5 UUID with namespace UUID_NAMEBASED_NS_OID
guid:38cc7ca4-82f8-591d-9007-62966e246be3	Name based version 5 / SHA1 UUID with namespace UUID_NAMEBASED_NS_OID
mac:B2-81-2E-EC-A1-CE	OIDplus Information Object MAC address, Unicast (AAI)
mac:B3-81-2E-EC-A1-CE	OIDplus Information Object MAC address, Multicast (AAI)
weid:P-1A2V-5-1-1-1-9	WEID notation
x500dn:/dc=com/dc=example/cn=oidplus/1.3.6.1.4.1.37476.2.5.2.9.4.1=1115203052/1.3.6.1.4.1.37476.2.5.2.9.4.2=787259854	OIDplus Information Object X.500 DN