Policy OV SSL - 组织验证（OV）SSL 证书策略 —— 在域名所有权之外核验申请组织的合法存续与身份信息

Zurückkehren Übergeordnet: Cert Policy - 证书策略（CP）子树 —— 规定所签发证书的适用范围、安全要求与签发/续期/吊销/审计约束 (1.3.6.1.4.1.59719.5.1)

Technische Informationen

Punkt-Notation:	`1.3.6.1.4.1.59719.5.1.110`
ASN.1-Notation:	`{ iso(1) identified-organization(3) dod(6) internet(1) private(4) enterprise(1) tsingyao(59719) pki-certificate-system(5) cert-policy(1) policy-ov-ssl(110) }`
OID-IRI-Notation:	`/ISO/Identified-Organization/6/1/4/1/TsingYao/PKICertificateSystem/CertPolicy/PolicyOvSsl`
WEID-Notation:	`weid:P-1A2V-5-1-32-5`
DER-Kodierung:	`06:0B:2B:06:01:04:01:83:D2:47:05:01:6E`

Beschreibung

English:
Organization Validated (OV) Secure Sockets Layer (SSL) certificate policy. This policy defines the configuration rules for OV SSL certificates: in addition to domain ownership verification, it validates the legal existence and identity information of the applicant organization, and applies to issuing and managing OV SSL certificates for website encrypted communication.
Recommended handling: prepare valid organization certification materials in advance, cooperate with the identity review, and track the certificate lifecycle to prevent expiration.
Status: registered but unused. No certificate has been issued under this policy; when activated, define the accepted organization evidence sources and the revalidation period. The unused state shall be re-verified at each revision of this file.
Recommendation: OV is the recommended default for enterprise websites because it balances validation cost and identity assurance; reserve DV for internal or non-critical endpoints.
See also: 1.3.6.1.4.1.59719.5.110, 1.3.6.1.4.1.59719.5.1.100, 1.3.6.1.4.1.59719.5.1.120.
Verification: 2026-10-22 — this arc and all its sub-ordinates are confirmed unused; re-verify the unused state at each revision of this file.

中文:
组织验证（Organization Validated，OV）安全套接层（Secure Sockets Layer，SSL）证书策略。本策略定义 OV SSL 证书的配置规则：除域名所有权核验外，还核验申请组织的合法存续与身份信息，用于签发和管理网站加密通信所用的 OV SSL 证书。
处理建议：提前准备有效的组织证明材料，配合身份审核，跟踪证书生命周期避免过期。
状态：已注册但未使用。尚未按本策略签发任何证书；启用时应定义可接受的组织证明来源与重新核验周期。本文件每次修订时须重新核验该未使用状态。
建议：OV 在验证成本与身份保证之间较为平衡，推荐作为企业网站的默认选择；DV 仅用于内部或非关键端点。
关联节点：1.3.6.1.4.1.59719.5.110、1.3.6.1.4.1.59719.5.1.100、1.3.6.1.4.1.59719.5.1.120。
核验：2026-10-22 —— 本弧及其全部下级标识均确认未使用，本文件每次修订时须重新核验该未使用状态。

Registrierungsstelle

tsingyao
E-Mail: op@tsingyao.net
JunQing Gu
TsingYao Technology Limited

Die Registrierungsstelle möchte ihre persönlichen Informationen nicht veröffentlichen.

Untergeordnete Objekte

ID	Base36	ASN.1 IDs (kommagetrennt)	IRI IDs (Kommagetrennt)	RA	Kommentar	Erstellt	Geändert
1	1	policy-ov-ssl-v1	PolicyOvSslV1	tsingyao

Alternative Bezeichner

Bezeichner	Beschreibung
aid:D276000186B200054278A5EC6BCAE8B6 (Keine PIX erlaubt)	OIDplus Information Object Anwendungsbezeichner (ISO/IEC 7816)
guid:4278a5ec-0000-8000-a6d3-15a923818e82	OIDplus Information Object Custom UUID (RFC 9562)
guid:7f145819-3ffd-38fd-8125-dd4ee6653eb9	Namensbasierte Version 3 / MD5 UUID mit Namensraum UUID_NAMEBASED_NS_OID
guid:4ee6cff1-47b7-5703-a623-ac3dea33035c	Namensbasierte Version 5 / SHA1 UUID mit Namensraum UUID_NAMEBASED_NS_OID
mac:B2-7A-6B-CA-E8-B6	OIDplus Information Objekt Unicast MAC-Adresse (AAI)
mac:B3-7A-6B-CA-E8-B6	OIDplus Information Objekt Multicast MAC-Adresse (AAI)
weid:P-1A2V-5-1-32-5	WEID-Notation
x500dn:/dc=com/dc=example/cn=oidplus/1.3.6.1.4.1.37476.2.5.2.9.4.1=1115203052/1.3.6.1.4.1.37476.2.5.2.9.4.2=1808459958	OIDplus Information Object X.500 DN