Policy OV SSL - 组织验证（OV）SSL 证书策略 —— 在域名所有权之外核验申请组织的合法存续与身份信息

Go back Parent node: Cert Policy - 证书策略（CP）子树 —— 规定所签发证书的适用范围、安全要求与签发/续期/吊销/审计约束 (1.3.6.1.4.1.59719.5.1)

Technical information

Dot notation:	`1.3.6.1.4.1.59719.5.1.110`
ASN.1 notation:	`{ iso(1) identified-organization(3) dod(6) internet(1) private(4) enterprise(1) tsingyao(59719) pki-certificate-system(5) cert-policy(1) policy-ov-ssl(110) }`
OID-IRI notation:	`/ISO/Identified-Organization/6/1/4/1/TsingYao/PKICertificateSystem/CertPolicy/PolicyOvSsl`
WEID notation:	`weid:P-1A2V-5-1-32-5`
DER encoding:	`06:0B:2B:06:01:04:01:83:D2:47:05:01:6E`

Description

English:
Organization Validated (OV) Secure Sockets Layer (SSL) certificate policy. This policy defines the configuration rules for OV SSL certificates: in addition to domain ownership verification, it validates the legal existence and identity information of the applicant organization, and applies to issuing and managing OV SSL certificates for website encrypted communication.
Recommended handling: prepare valid organization certification materials in advance, cooperate with the identity review, and track the certificate lifecycle to prevent expiration.
Status: registered but unused. No certificate has been issued under this policy; when activated, define the accepted organization evidence sources and the revalidation period. The unused state shall be re-verified at each revision of this file.
Recommendation: OV is the recommended default for enterprise websites because it balances validation cost and identity assurance; reserve DV for internal or non-critical endpoints.
See also: 1.3.6.1.4.1.59719.5.110, 1.3.6.1.4.1.59719.5.1.100, 1.3.6.1.4.1.59719.5.1.120.
Verification: 2026-10-22 — this arc and all its sub-ordinates are confirmed unused; re-verify the unused state at each revision of this file.

中文:
组织验证（Organization Validated，OV）安全套接层（Secure Sockets Layer，SSL）证书策略。本策略定义 OV SSL 证书的配置规则：除域名所有权核验外，还核验申请组织的合法存续与身份信息，用于签发和管理网站加密通信所用的 OV SSL 证书。
处理建议：提前准备有效的组织证明材料，配合身份审核，跟踪证书生命周期避免过期。
状态：已注册但未使用。尚未按本策略签发任何证书；启用时应定义可接受的组织证明来源与重新核验周期。本文件每次修订时须重新核验该未使用状态。
建议：OV 在验证成本与身份保证之间较为平衡，推荐作为企业网站的默认选择；DV 仅用于内部或非关键端点。
关联节点：1.3.6.1.4.1.59719.5.110、1.3.6.1.4.1.59719.5.1.100、1.3.6.1.4.1.59719.5.1.120。
核验：2026-10-22 —— 本弧及其全部下级标识均确认未使用，本文件每次修订时须重新核验该未使用状态。

Registration Authority

tsingyao
E-Mail: op@tsingyao.net
JunQing Gu
TsingYao Technology Limited

The RA does not want to publish their personal information.

Subordinate objects

ID	Base36	ASN.1 IDs (comma sep.)	IRI IDs (comma sep.)	RA	Comment	Created	Updated
1	1	policy-ov-ssl-v1	PolicyOvSslV1	tsingyao

Alternative Identifiers

Identifier	Description
aid:D276000186B200054278A5EC6BCAE8B6 (No PIX allowed)	OIDplus Information Object Application Identifier (ISO/IEC 7816)
guid:4278a5ec-0000-8000-a6d3-15a923818e82	OIDplus Information Object Custom UUID (RFC 9562)
guid:7f145819-3ffd-38fd-8125-dd4ee6653eb9	Name based version 3 / MD5 UUID with namespace UUID_NAMEBASED_NS_OID
guid:4ee6cff1-47b7-5703-a623-ac3dea33035c	Name based version 5 / SHA1 UUID with namespace UUID_NAMEBASED_NS_OID
mac:B2-7A-6B-CA-E8-B6	OIDplus Information Object MAC address, Unicast (AAI)
mac:B3-7A-6B-CA-E8-B6	OIDplus Information Object MAC address, Multicast (AAI)
weid:P-1A2V-5-1-32-5	WEID notation
x500dn:/dc=com/dc=example/cn=oidplus/1.3.6.1.4.1.37476.2.5.2.9.4.1=1115203052/1.3.6.1.4.1.37476.2.5.2.9.4.2=1808459958	OIDplus Information Object X.500 DN